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Many of the articles published iti COMPUTIST detail ihc removal of copy protection schemes 
from commercial disks or contain information on copy protection ami backup methods in general. 
Wc also print bit copy parameters, lips for adventure games, advanced playing techniques (APT's) 
for arcade game fanatics and any other information which may be of use to the serious Apple user. 
COMPUTIST also contains a special CORE section which f(>cuscs on information not directly 
related to copy protection. Topics may include, hut are not limited to: tutorials, hard ware /so If ware 
product reviews and application and utility programs. 



What Is A Soft key Any way'.' Softlse) is a term 
which we. coined to describe a procedure thai rttitwMis', 
or .a least circumvents, any copy protection on a 
particular ttfeli Once a snflkey. procedure has Nen 
performed, the resulting disk can usually he copied h\ 
the use of Apple s COPY A program (on the DOS 3.3 
^ 4 . ■.?■_■ in Master Diak}- 

Commands And Controls: In tiny article appearing 
In COMPUTIST. commands which a render is required 

to peifium uic ,el apart from normal text by being 
indented and bold. An example is: 
i'Rtth 

Follow this with the RETURN key. the RE IT1KN key 

must be pressed at the end of every such command unless 

otherwise specified. 

Control characters arc indicated by being boxed. An 
example is: 



f" complete this command, you BUtst ri q si type [he 
number 6 and then place one finger on the i: I RI key 
;ind one linger on the P key . 

Requirements: Most of the programs and soft keys 
which appear in COMPUTIST require one of the Apple 
II scries of eompiaers and ai least una diet drive with 
tlOS _V_1. Occasionally . some programii and procedures 
have special icquiiemenis the priTeqiiisiics for 
deproiceiion techniques or programs will always be listed 
at the beginning ol ihe article under ihc * Requirements:" 
teadiag. 

Software Reronimctulat iuns: The following pro- 
grams (in similar ones) are strongly recommended lui 
readers who wish io Obtain the most benefit from our 
articles: 

1 1 Apiitesnll Program Editor such as Global Program 
Line Editor (GPLE) 

2) Sector Editor such as PiskEdit. ZAP from Bag ol 
Tricks or Tricky Dick from The CIA 

3) Disk Search I tility such as The Inspector, The 
tracer from Ihc CIA nt flic COKE llisk Searcher 

4) Assembler such as the S-C Assembler or MerliivBisj 
Mat. 

5) Bit Copy Program such as Copy |[ Plus. Locksmith 

l .■ ■ 'the F.sseiUial Dam Duplicator 

6) Text Editor capable of producing inunial sequential 
texl files such as Applewriler || . Magic Window |[ 
oi Screenwriter ||. 

You will also luiiICOPYA FID and MUFFIN Irom 
the DOS 31.3 System Master Disk useful. 
Super IOR: This program has most recently appeared 
in COMPUTIST No. J2. Several softkey pweedores will 
make use uf a Super IOB controller, a small program 
Thai mast he keyed into the middle ot Super 1014. I lie 
com roller Changes Super IOB so that h can copy different 
disks. To gut the latest Version of I his program, von muv 
order COMPUTIST No. .12 as a hack "issue or -rder 
Program Lihraiy Ui.sk Nit. 32 

RESET Into The Monitor: Some softkev pro- 
cedures require that the user he able to enter the Apple"* 
sj stem monitor during ihe execution ol a copy protei ml 
program. Check the following lisi loses what hardware 

you will need to obtain this ability. 

Apple |[ Pius - Apple He - Apple emiipatihkst 1 1 Place 
an Integer BASIC ROM card in one of the Apple skiis. 
_' Use a non-maskable interrupt (\Mh card such as 
Replay or Wildcard. 

Apple || Plus • Apple compatibles: 1 ) Install an F8 ROM 
with a modified RtSIT vector on Ihe computet -■ 



moiherboard as detailed in ihe "Muddied ROM's" article 
uf COMPUTIST No. 6 or ihe ""Dual ROM's'" article 
in COMPUTES I No \H 

Apple lie - Apple lie: Install a modified CD ROM on 
the computer's uioUicrhoard. Cla> Hitrrell's company 
(Cutting Edge Em.: Ho?. 43^34 Ren Cen Station-HC. 
Delrnii Ml 4H?43) sells a hardware device that will 
give >ou this ability. Making this modification to an 
Apple //c will void us warranty but the increased ability 
to remove copy protection may Justify it, 
Recommended Literature: The Apple |[ Reference 
Manual and DOS 3.3 manual are musts tor anv serious 
Apple user Other helpful liooks include: Bt-iiealli Apple 
DOS. Don Worih and Pietist Ltacboer Quality Software. 
$19,$!3; .tucm/i/v LattgltGgt For The Applesoft 
Pmj>rmnm#r, Roy Meyers and C W. Fmlev. Addison 
Wesley, 116,85: and What'i Wltirt fn Tin- Apple. 
William Lubeil. Micro Ink . S. 7 4 95 

Keying In Applesoft Programs: basic pu >y mm* 
arc primed in COMPUTIST in a formal that is designed 
io minimise errors tor readers who key In iiie.se programs 
to understand this format, VC41 must tint undersliind Ihc 
formatted LIST feature ot" Applesoft. 

An illustration If you strike these keys: 

It) HOMEtREMCLF.AR SCREEN 

a program will be stored in Ihc computer's mcnmiy. 
Strangely this program will nor have a LIST that is 
exactly as you typed it. Instead, the LIST will look like 
[Ins 

10 HOME : REM CLEAR SCREEN 
Programs don't usually LIST the same as they were 
keyed in because Applesoft inserts spaces into it program 
listing be ['ore and after every command word or 
mathematical operator. These spaces usual ly don't pise 
a problem except in Sine numbers which contain REM 
or DATA command words the -.puce inserted alter these 
command words can be misleading. For example, if you 
want a program to have- it list like litis: 

It) DATA 67.45,54.52 
you would have to omit the space directly after the DATA 
command wold. II you were to key in Ihe space dilecih, 
after the DATA command word, the LIST of the program 
would look like this: 

10 DATA 67,45.54,52 
flu:. LIST is diflerem from the LIST you wanted. I he 
number of spaces you key alter DATA and REM 
command words is very important. 

All of this brings us to llic COM PI HIST LISTing 
formal. In a BASIC LISTing. there are two types of 
spaces: spaces that don't matter wheihei the*j are keyed 
or nut and spaces that must be keyed. Spaces thai nuisi 
be keyed in are printed as delta characters i A i A1J other 
spaces in a COMPUTIST BASIC listing are put there 
for easier reading and it doesn'i matter whether you type 
them or uoi . 

I here ts tine exception: If you want your checksums 
(See '"Computing Checksums" section I to match up. you 
muni not key in any spaces after a DATA command word 
unless i hey arc marked by delta characters. 
Keying In Hoahmips: Machine language programs 
are printed in COMPUTIST as both source code rod 
he* dumps' Only one ot these formats need lie keyed in 
to gel a machine language program Heulumps are ihc 
shortest and easiest format to type in. 

To key in iiCMiiuups. you must lirst enter the monitor; 

CALL -151 

Now kes in Mic lies dump exactly as it appears in the 
magazine ignoring the four-digit checksum at the cud 
ol each line la "S" and four digits). If you hear a beep. 



you will know thai you have nped something 
incorrectly and must retype thai line. 
When finished, return to BASK' with a: 

mac, 

Keiiiernbei in KSAVK the program wiih ihe correct 
filename, address and length parameters as given in 
the article. 

Keying In Source Code The source code 
portion of a machine language program is pun ujuii 
null to better explain the program'- operation. [f.you 
wish to key it in, you will need an assembler. The 
S-C Assembler is used to generate all source code 
printed in COMPUTIST. Without ihis assembler. 
you wUJ have to translaie pieces of the source code 
into something ymti assemble i will imilersuin.l \ 
uihle of S-C Assembler directives just for ihis purpose 
was printed in t'OMPi ftsi Nti 17 To translate 
source code, you will need Io understand Ihc 
directives ot your assembler and convert the 
directives used in the source code llsling to itimdar 
directives used hy your assemhlei 
Computing Checksums Checksums arc- four 
digit hexadecimal numbers which verify whether ot 
not you keyed a program exactly as it was printed 
in COMPUTIST "['here are two types of checksums 
one created by the CHECKBIN program ilm 
machine language programs) ami the other errated 

by the CHECKSOFT program I for DAS1C 
programs), Both programs appeared lit COMPUTIST 
No I tind The Best of Hardcore Computing, An 
update to CHECKSOFT appeared in COMPC'I 1ST 

No IS. If the checksums these programs create on 
your eomputei match ihe checksums aeeompanvine 
ihe program m the niacazine, then you keyed in the 
program correctly. II not. ihe program is incorrect 
at the line where the first checks urn differ; 

1) To compute CHECKSOFT checfourm 

LOAD filename 
BRUNCHECKSOI'T 

Get ihe checksums with 

& 

And correct ihe program where the checksums dil'ter. 

2) To compute CHI-XKiilN eheeksums: 
CAM 151 

BLOAD filename 

Install CHECKBIN at all out of die way place 

BRUN CIIKCKBtN.AlMBM 
Get ihe checksums by typing Ihe slaitmg address 
a perio d and ending address of the file follow ■ J In 
aPvT 

xxs.itxx lClYi 
And correct the lines ai v. Inch ihe checksums dillei 



Coping with 
COMPUTIST 

Welcome lo COMPUTT5T, it puhlicittitni 
(li-vulcil to the serious user of Apple || unci 
Apple |[ compatible computers. Our 
magazine contains information you arc nol 
likely io foul in any of the other major 
journals dedicated to the Apple market. 

Our editorial policy is that we do NOT 
condone software piracy, bill we do believe 
that honest users are entitled to backup 
commercial disks they hove purchased. In 

addition lo the security ol a backup disk, 

the removal ol copy protection j;iu>s the user 
the option uf modifying application 
programs to meet his or her needs. 

New readers are advised to read Ihis page 
carefully tn a\uiri frustration vthen 
attempting to follow u soli key or when 
cuter i n% the programs printed in this issue. 



ESQUIRE; January 1982: Snivels u) the S<#rare Pirates ky Ue Cows: When SBK* Appje entfW8S» 9 wWtorfgKM Sralt Iiimu rit»ui lilt uulloii !i;l l.tlrismitt! ,!il'.vnwn--'r,N m,.',< d^ejejj 1I-11 
it nas rolhniy bii; ctnsurshi|j ami dumber t sample 0: the marines ignniliw rtw awragc Apple user to placals ti'.CT ad»tlSWK So ihsy stalled liter ™ publiciuion. HAKDUJKt EMRlTftti 'ihii.ii 
^ i'n :s ii^si issue vams to p!av tlla i^le uf LLUiiod^Lit unikrymunri m^yajin^ baiMni} The ind;ist:i.'s stodyy straight ptljss." 

TIME; February S, 1981: Romm,i S HffTseh Pirates; nAKDCOKK COMPUTING, il injsll magazine in Tacomfl Washinrjion. nwns pirai« afoul liw fetal Whtiahjffi Itwi rra»n*« m usfng agairsl rlwm ' 



Cth Anniversary Issue 



Xvs. it has hi.*en five years since this 
magazine's inception: 5 yctirs (if rabid copy- 
protection by major software publishers, 5 years 
nf censorship by major computer magazines 
about undoing copy -protection. 5 years of 
si niggle and change for SortKcy Publishing in 
lis cftbn to reveal suppressed information about 
copy -protect ion. 5 years ol' devoted support by 
our subscribers. 

[[ all began in die attic of a small house in 
Tacoma. Washington (yon know, that small 
'town" nex i door to Seattle?) around midnight, 
die backer's bewitching hour when everything 
is asleep except for the computers, 

In Ihe summer of '81 , il seemed as if there 
was a plot to boycott a copy program called 
'Locksmith' because, unlike Apple's COPYA. 
litis program would copy disks that software 

publishers didn't want ;invone. even the person 
who bought Ihe disk, to backup. 

Editors wrote editorials denouncing as pirates 
anyone who backed up their copy -protected 
software. Some even went so fin as to 
distinguish between different sons of pirates: 
commercial operators oui to make a killing in 
violation iif the US copyright laws, casual 
copters out to expand their library by 
exchanging the copies they made of their own 
software, and accidental pirates who allow their 
software to be copied by one of the casual 
copiers. 

Here are excerpts from some of those 
editorials: 

' "Hie presence of a number of vmwmniath 
available hit 'i'py programs will [iriibablv 
stnmduie nuwy software eom)Mtnies to review 
their service pt /lick's. Those reviews should 
produce constructive new policies which 
improve pricing and availability oj 'replacement 
iHU'fyitff.s, That will be a positive step, 

The presence of commercially available hit 
copy programs eon make it easier for software 
pinttes to make iiuatilluiri:ed copies of 
commercial software for broad distribution. 
Thar is potentially a negative result, 

Bat the hit copier itself is not logically or 
legafft responsible for either. It is simply a 
program — one which can he used badly or 
well. The simple fact is. hit copy p rag rams are 
now here. " 

Mike Harvey, publisher-editor 
NIBBLE, volume 2. No. 2 

' 'Several other maga'ines in the industry have 
recentlx been numiiii> advertisements for a 
program that copies tduplicaies) protected 
software for a particular machine. One of the 
mugtr.ffics < Micro) checked Wlffl us to see our 




We are NOT 




but we're not fools, either. 

We're serious programmers and software users who just want to have 
backup copies of any software we own. COMPUTJST magazine shows 
us HOW TO MAKE BACKUPS OF COMMERCIAL SOFTWARE 
regardless of the maker's attempt to stop us from having legal copies. 
Don't let them stop you from protecting your own rights. 

Remove copy-protection 

Remove copy-protection from your valuable library of expensive software The publisher 
of COMPUTIST has been showing subscribers how to unlock and modify commercial software! 
for the past 5 years. Don't be one of the users abused by user-FIENDLY locked- up software. 

6 1 ssue SU EEC Rl PT ION R A T E S U.S..S20 fir st c la ss. S3 4 Camrlo, Mexico $34 O I he r =0 - e. g n $60 

SAMPI f COPY 1.1 5 54.75 Foreign 58.00 

US funds SStwfi Sfl U 5 ban*. Sena cl".eo< or neney order to 

COMPUTIST: PO Box 110937-A; Tacoma, WA 98411 
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subscribers, renew your freedom 

Check youi mailing label lo set if you need to renew your subscription. And if you think 
you might forget when that fatal time arrives, tenew right now. Just use this order blank. 

and if you're moving... 

Let us know right away or at least 30 days in advance so (hat you won't miss a single 
issue Jusi write your now address on this order form, and include your present address 
label. Issues missed due to non-receipt of this Changc-of Address may he acquired at the 
regular back -issue rales. 
Please rememher, the Post Office does not forward third class mail unless requested. 



declines on sm 1 1 1 n I vc i -li xi ii". We indicated 1 1 nil 
\re. iHBuA/fl ) run such mix. enw thai the 
mjtwim' ill i/neiiion c/ >uitl be used t<i : p.i:mhux 
copies of protected' and prop net at) software. 
We understand that Micro hits since decided lo 
do die xante. 

We applaud this move toward protecting die 
fig/Its <>j llle software industry mid eucounivc 
additional i ammctil. " 

Robert Lock. publisher-editor 
COMPUTE, volume 3. No. 3 

"MICRO !.\ unconditionally opposed to the 
illegal capping of software livings, cassette*, 
diskettes or air, oilier protected material. I am 
einliurraxxed that the need has arise n to make 
wlittt xhotdd he an ohvtous xtuiemenl of policy 
Due io the publication of an advertisement in 
our January and February txxuex. a number nf 
advertixerx and readers have exprexsed concern 
that MICRO appeared to. be supporting the 
illegal copying of protected diskx. In retrospect. 
1 believe thai I uiatle a mistake in ollon fng the 
ad to run... 

"Tin- advertisement refei Ted lo above was for 



a program that would copy 'protected' diskettes, 
i'lw staff of MICRO will now review every ad 
and where there are problems, take appropriate 
steps. ' ' 

Robert M. Tripp. publisher-editor 
M1CKO. No. 34, March (ftl 

And so began lbs censorship of" advertising 
which continues unabated to this very day. even 
though the bit copy programs are now 
advertised With the disclaims thai they should 
not he used U) pirate software. 

However, our own ads are still beine 
censored or refused, usual Iv because our ads 
say ihat we show readers how to remove 
(softkey) copy-protection from their disk 
software. 

That is why we are sending, this special 
ANNIVERSARY issue to potential subscribers 
throughout the year. We look the normal 
COMPUTET issue just before it was to go to 
print, added this special anniversary note and 
inserted the Computer Learning Center's 
catalog of public domain software as part of our 
subscription drive 



new io hacking? 

COMPUTLST magazine is dedicated to the serious user of Apple || computers. However, 
each issue contains informative articles dealing with subjects even novices can follow. 

Our statistics show [hat once you've read this fai . you're with us for life As a mailer ol 
lact. most COMPUTIST readers prefer our magazine to any others they receive or have 
received (and the rest tire pretty darn happy with it). 

For You 

Through the years. COMPUT1ST has had Iwo mam goals: i) to show our readers, in as 
clear a lormat as possible, how to copy the -tlticopyahle' programs [hey have purchased and 
2) to teaeh our readers what they want to know about their computer. 

Rach mouth we detail the copying of several commercial programs Whether an old classic 
like Miner 2049cr tin COMPUTET No. 27) or a new masterpiece like Pantavision tin 
( OMPUTIST No. M) you can be sure it has been or will be covered in COMPUTIST. 

We listen to our readers' needs, [f you have a program that you wish you could copy, 
just tell us and if we haven't already printed information about that program, we will add 
it to our "Most Wanted List." which is a list of the software vou will most" likely see covered 
ill future issues of COMPUTIST, 

At the Core 

To add a little 11 avor to our publication, each issue contains a CORE section which can 
contain anything from high-quality free software to tutorials on a variciv ot subjects (computer 
hardware modifications, the ins and outs of DOS. etc). 

Through the COKH section, you'll learn about about the VTOC, sector editing, modified 
ROMs. Ultima IV characters, boot code tracing and much much more. Our readers are our 
authors, so as they learn you will too. You mav even wish to write an article yourself and 
earn extra money. 

You will find lhal as COMPUTIST lakes you by the hand through the dark recesses of 
the machine language Monitor you will learn more about how and why your computer docs 
what it does than you could learn from reading a textbook. 

Magazine Reference Material 

Back issues of COMPUTIST arc considered a valuable assel when you need funis on repairing 
damaged files or converting a disk you can't duplicate into one tliat you can. A survey we 
100k Of our readers showed that 91.2% of them keep every issue of COMPUTIST and add 
il to their reference material library. How many other magazine;, can you say that about 1 ' 

COMPUTIST is Best 

Thousands of satisfied readers eatfi be wrong. Whether it is removing copy protection 

from commercial disks or teaching about the heart of your computer. COMPUTIST is best! 



We (hunk all our loyal subscribers and 
readers for their continuing support. 

into the past... 

fV'.v, we were once called HARDCORI- 
Computing, dien we became CORE and 
Hardcore COMPUTIST, and mw ximplv 
COMPUTIST, I- or those of ynu who are 
confused, here '.v a list of all our ptlb/icalionx 
to date 



1981 

Ha id co re Coinpuiinu No I 
Update I . ! iieiviU-ner- 

1982 

Hardcore Cmtlpwing N& 2 

Update 2. 1 newsletter 
Hardcore Campuiiiti! .No. 3 
Update 3. I newxletlet 
Update .-1.2 newsletter 



CORF ,\'a 
Hardcore 

I lard core 

CORE No 

Hardcore 
Hardcore 
CORE No 

Hardcore 



1983 

1 Graphics special 

CVMPimST 1 
COMPUTIST 2 

. 2 ill Hi lies special 
COMPUTIST 3 
COMPUTIST 4 
. 3 Gtimt'S special 
COMPUTIST J 



Hardcore 
Hardcore 
Hardcore 
Hardcore 
Hardcore 
Hardcore 
Hardcore 
Hardcore 
Hardcore 
Ha rile ore 



Hardcore 
Hardcore 
Hardcore 
Hurtle ore 
Hardcore 
Hardcore 
Hardcore 

iinrdc/ire 
Hardcore 
Hardcore 
Hardcore 



1984 

COMPUTIST f> 
COMPUTIST 7 
COMPUTIST $ 
COMPUTIST 9 
COMPUTIST 10 
COMPUTIST 1 1 
COMPUTIST 12 
COMPUTIST 13 
COMPUTIST H 
COMPUTIST 15 

1985 

COMPUTIST Id 
COMPUIIST n 

COMPUTIST 18 
COMPUTIST 19 
COMPUTIST 20 
COMPUTIST 21 
COMPUTIST22 
COMPUTIST 23 
COMPUTIST 14 
COMPUTISI 25 
COMPUTIST 2ft 



1986 

COMPUTIST 27 
COMPUTIST 28 
COMPUTLST 29 
COMPUTIST JO 
COMPUTIST 31 
COMPUTIST 32 

COMPUTIST IS NOW PUBLISHID 12 times 
a year. Some back issues ate still available (see 
the hack issues ad on the back page' 
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ArfjJress-aJI ad^'h'sing inquiries in COMPUTIST, Advertising 
Departmenl. PO Bo* 110816. Tacoma, WA 98411 Mail 
manuscripts: or reqve&ts foi Writer's Guides .10 COMPUTIST. PO 
Bux 110937 A. Tduuma. WA 9B41 I 

flftiurn pnstr-ige must accompany all manuscript, tJ/awings 
photos, disks, or lapes if the-y are to be returned. Unsolicited 
manuSCMptS wifl tn= re'umed only it adequate return postage is 
included 

EnLire iHjrrl#fl& copyngh: I9S6 by SoftKcy Publishing All 
rights reserved Gopymg done /or other lhflrt personal or internal 
reference (^ithoui express wniten perm*S5icm from- tnre publisher) 
15 prohibtled. 

Wih ectilyriftl atafl ssmjrm^ no liability or resjjo.nKibrhcy for the 
nmrtnrts ariuflnisert in tha magazine. Any opinions expressed 
bv tne authors are not necessary iho&e or COMPUTET 
magazine or Soft Key Pubtrshing. 

Apple usually relers to an Apole \[ computer and is a trademark 
ol Apple Computers. Inc. 

SUBSCRIPTIONS: Ffales (lor tl issues); U.S. $20, U.S. 1st 
Class $2-3, Canada £ Mexico $34, Foreiyn S60 Direct inquiries 
to: COMPUTIST, Subscnplion Department, PO Box 
11Q937-A, Tacoma. WA Mill Please mcluoe address umei 
wttti correspondence. 

DOMESTIC DEALER HATES: Hhll (POfi) 474-5 7£0 fnr mtw 
in formal i on 

Change Ol Address: Please allow J weeks toi change of 
address 1l> lake df [eel On postal fumi 3576 supply your nuv; 
■address and your most recent address label Issues missed due 
10 non-receipi o' change, of address may be acquired at the 
regular back issue rate 
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PuhltsheWftdiror; C Kafka R MatgjH Ma»HfiiHft Kdildi*; Ruy Efctfrwli 

I ei hniL^I Editor r R^ri Knowl^ Circulation; Mfchclfe Funk. PcWiMd rfwilflwa): 

Unr-lisin^- ilflfij 4^-t-S7^(> Pi-jiiling: V-,lr<N timpbta In*- &Uljfe WA 
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so/tfceys; 

10 Revisiting Music Construction Set 

bv Joseph Weeks 

12 Cubit 

by Panagioiis Simatos 

14 Baudville Software 

by William Forsvih 

23 Hartley Software 

by Dave Stanton 

24 Bridge 

by Dirk Meikle 

26 Early Games for Young Children 

by Joe BtmSing 

28 Tawala's Last Redoubt 

by Danny Pollak 

feature: 

25 Using Data Disks with Microzines 

by Wesley R. belty 

core: 

16 Super IOB vl.5: a reprint 

This article presents ihc program used most frequently by COMI'UTIST to dcproicet 

commercial software, by Ray Day rah 

departments: 

4 Input 

6 Most Wanted List 

6 Bugs 

28 Adventure Tips 

7 Readers' Softkey & Copy Exchange 

Broderhund's I'riill Shop Companion by Roger Sum-on & David Chun-wiri. Pirates Harbor's 
K racking Vol II by Dtmi G. Grande. Origin System's Mot hi us by Jeff Riven, International 
Solutions' Mouse Budget, Mouse Word & Mouse Desk by Bill Seherer, Electronic Arts' 
Adventure Construction Set bv Charles Tavior 



Please address letters to: 

COMPUTIST 

Editorial Department 

PO Box 110B46-K 

Tacoma. WA 9841 1 



Include your name, address and 
phone number. 

Correspondence appearing in the 
INPUT section may be edited for 
clarity and space requirements. In 
addition, because of the great 
number of letters that we receive and 
the smal! size of our staff, a response 
to each letter is not guaranteed. 

Our technical staff Is available for 
phone calls between 1:30 pm and 
4:30 pm (PST) on Tuesdays and 
Thursdays only. 



Various APTs 



I saw Conan on your most wanted list and 
have an APT Tor it. At the beginning of the 
game climb up to the top of the castle and walk 
over lo the right. Jump off of the castle into the 
tree. This will give you an extra life, but it will 
only work once. 

Nov, here is a super APT for Ghost busters. 
When the program asks you for your name type 
in UOG. When prompted for the account 
number, type in all the 1 's you can until it stops. 
This should give you about $2000 or more. 

Here's one for Rescue Raiders. When you 
start the game, rest your helicopter on ihe pad. 
Then type in POPPY. This should give you 
some functions that are surprising. You wit) be 
ahle to use these commands now: 

J - teleports you to the enemy's base 
K = teleports to middle of battle field 
L = teleports yoj to your side of the bat- 
tle field 

/ = lives you a free helicopter 
RETURN = makes you bullet proof (it does 
not shield you against missiles) 

If for some reason your code doesn't work 
try typing ZIPPY instead of POPPY 



Uni-Appleworks 



Here's a quick (?) and dirty fix. to get 
Appleworks and Sensible Speller together on 
a Unidrive 3.5. AW version 1.2 will transfer 
and work fine, but will not support the new 
Apple memory card. Give your dealer 20 bucks 
for an update if you need this feature. Take a 
backup of Sensible Speller ProDOS 
(COMPUTIST No. 16) and use a hlock (or 
sector) editor to search the file SSPELLER for 
the string /SENSIBLEM1 /SSPELLER . In my 
version this is at the beginning of block $4A. 
Change this to /APPLEWORKS/S/SPELLER . 

Transfer all the files from the AW Startup 
and Program disks to the Unidrive volume 
/APPLEWORKS , Create a subdirectory IS on 
this volume and transfer the modified 
SSPELLER tile onto this subdirectory along 
with all dictionary files. RENAME the 
SSPELLER file to SPELLER. 

When you quit AW press <rctum> to accept 
current prefix. When you are prompted with 
ENTER PATHNAME OF NEXT APPLICATION 
type S/SPELLER and you're off and running. 

P.S. 1 like to set up another subdirectory on 
the main volume called /AW. DAT A and 
configure AW to use this as my primary data 
source. This keeps things neat and avoids the 
51 fde limit on main ProDOS directories. 



David Todd 
Cambridge, MD 



Different Gato 

Movie Maker 

Temple of Apshai 



First off. your magazine is great. In 
COMPUTIST No. 23, Clay Harrell wrote a 
softkey for Gato by Spectrum Holobyte. Step 
2 of his softkey tells us to read in Track $15, 
Sector SOC. I did this and found that the bytes 
on my version were different than on his. I read 
in the rest of the sectors on track 515 and this 
problem is easily fixed. Simply load in track 
$15, Sector SUA for you who have different 
versions. The complete track should read: 

(RACK SECTOR BYTE FROM TO 



PPY 


118 


$0A 


tac 


SAD 


SA9 




$15 


S0A 


(3D 


$E9 


}0! 


Kenny Khoo 


$15 


$0A 


$8E 


$C0 


iDG 


ivcrsidc. CA 


115 


$0A 


$8F 


SA9 


is? 



I don't know if it's the same with all versions 
or if it was simply a typo, but it worked for me. 

Also, the new Movie Maker published by 
Electronic Arts' new label system is very easily 
deprotected on my version. Please note that my 
friend tried this softkey on his version and 
option 2 from the menu did not work, but if 
you have the same one that I do, this will work. 

Requirements: 

Blank disk 

Sector editor 

Movie Maker (Electronic Arts) 

COPYA 

1) Copy the original with COPYA or any other 
fast copy program, ignoring any errors on track 
$06. 

2) Get out your sector editor, and perform the 
following sector edits: 



TRACK SECTOR BYTE 



FROM 



TO 



501 


K!F 


$00 


$4C 


$18 


$01 


m 


$01 


$69 


$60 


501 


S0F 


$02 


!A0 


$D0 



Also, one more quick antique softkey for the 
Temple of Apshai: 

Requirements: 

Blank disk 

Temple of Apshai 

Demuffin (Advanced Dcmuffin is preferred) 

System Master 

1) Using Dcmuffin. or 1 prefer Advanced 
Demuffin, demuffin tracks .$03 -$22 to your 
blank disk. 

2) Now, run Master Create on your system 
master and follow the instructions copying a 
normal DOS onto your copy. 

3) I suggest you use a fast DOS for your copy 
since there is a lot of disk activity. 

That's it! 



P.S. 1 have many cheats and maps for Ultima 
IV and Quest of the Avatar by Lord British. 
If you (or your readers) want further 
information, please contact me. 

Greg Poulos 

23278 Ennishorc Dr. 

Novi, MI 48050 

(313) 348-0183 
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Senior PROM News 

Cutting Edge Enterprises, a Detroit-based 
producer of software and hardware products for 
the Apple ][ series of computers, announced the 
release of Version 2.0 of its utility and 
programming aid. the Senior PROM. The 
Senior PROM is firmware i noun led on a small 
printed circuitry board which replaces the 
systems ROMs in the Apple //c and /Ye. and 
provides a variety of utility programs for 
examinations of memory, disks, and for writing 
and debugging Assembly -Language programs. 

This new release provides approximately 
twice as many functions as were previously 
available, including keys which display both the 
region of memory that was executing at the 
point of exam i nation and the Stack area. The 
most unique feature of the new release is a 
program (in ROM) that is comparable to the 
"Switcher" program for the Macintosh; it 
allows the user to keep two 64K programs in 
memory' and switch between them in a matter 
of seconds. A graphics program can be 
combined with a database, for examble. or DOS 
3.3 and ProDOS can be exchanged back and 
forth instantly. 

Other features include full NMI support 
allowing a saved program to be restarted at any 
time (from either memory or a normal DOS 
disk), allowing flexibility in game-playing, 
adventuring, or execution of utility programs. 
Additional features include the "Absolute 
Reset", save all 64K of Main memory to 
Auxiliary memory, and full Step and Trace 
junctions including an updated Mini-Assembler, 
with full support for the expanded 65C02 
instruction set. 

Also included are utilities for easy alteration 
of memory while a program is running, 
selection of the active bank in upper memory. 
and a printout of the text screen with a single 
keystroke. In addition, the sector editor (in 
ROM) also has its own operating system, so it 
may be used to edit and examine disks without 
booting DOS first. Extensive documentation is 
included with the product, including installation 
and operating instructions, with background 
material on the uses and applications of the 
Senior PROM. User support is available via a 
bulletin board running 300/1200 baud at 
313-349-2954. The Senior PROM is available 
directly from Cutting Edge Enterprises (Box 
43234 Ren Cen Stat ion/ Detroit, Ml 48243) for 
$79.95. Purchasers of earlier versions can 
upgrade to the new release for a fee of $10.00. 

Clay Harrell 
Cutting Edge Enterprises 



Ulysses and the Golden Softkey 

I just got COMPUTIST No. 20 and was 
unable to copy my Wizardry with COPYA, as 
stated in step ft 1 of the Wizardry softkey . Can 
anyone help me? 

After reading Denny Colt's softkey for 
Marauder in COMPUTIST No. 22. 1 sat down 
to have a go with Ulysses and the Oolden 
Fleece. Here is my softkey. 

Ulysses 

Serra On- Line 
Requirements: 
One blank disk (both sides) 
COPYA or similar copy program 
Sector editor 

1) Copy both sides of the disk with COPYA. 

2) Use a sector editor to read in track $17 sector 
$C. 

3) Change Byte $2C from $A8 to $60 and write 
it back to the disk. 

4) Read in track S17. sector $0E and change 
byte SA4 from $A8 to S60. 

5) Write it back to the disk and you're done. 
Side B does not need to be edited. 

Robert M. Kcssltck 
Newport News, VA 



Some //c Notes 

Thank you very much for the back issues 
which I ordered and just received, they were 
truly magnificent. However, there was a 
slight problem in the softkey for "Bank Street 
Writer //c" on page 26, COMPUTIST No. 25. 
The problem occurred in step 5: when moving 
the page indicator that loads Booll to ROM. 
The computer I have is an Apple He and 
changing $6659 to $F0 brought the message 
"check disk drive" onto the sccreen. To 
overcome this problem I had to move page 08 
to page 598 and change the relative page $08 
locations to page $98. This worked perfectly 
on my //c. 

Another problem J encountered was at step 
17, I could not find SA0 on Track 4, Sector 7, 
byte S37, Instead. I had to make the following 
changes to track $0D, Sector $07 bytes $7E 
through $85 inclusive on the disk. 

Old Value D4 D5 D6 D7 A5 96 EF 9A 
New Value D5 AA AD DE D5 AA 96 Dt 



Incidentally, the version I have of BSW is 
"2-1". 

Also, I have some good news for other Apple 
//c users. 

It is a well known fact that the Apple //c is 
a closed case, and opening the case voids the 
warranty. However, there is still a method of 
adjusting the drive speed of the built in disk 
drive without opening the case. This ability is 
very handy when preserving a nibble count with 
EDD, Locksmith, or even with Nibbles Away 
111, which incidentally I feel is not that great. 

If you look carefully at the bottom of the 
Apple lit you will notice a few screws, and also 
another hole directly under die disk drive which 
is about 2 inches from the side of the computer. 
If you insert a small screwdriver into this hole 
and turn it slightly clockwise you will have 
increased the speed of the drive. By turning 
counter-clockwise you will decrease the speed. 

So now when backing up a disk which has 
a nibble count track, instead of using someone 
else's disk drive, you will now be able to use 
your own. Also Copy Programs like EDD are 
well worth their cost now, because you can use 
mode #'s4and6. which in vlove adjusting drive 
speed. 

Do not forget to resel the drive speed back 
to normal! 

P.S. I have been unable to Boot Code Trace 
as indicated on the letter on page 6 of 
COMPUTIST No. 26. 

Could some of your leaders elaborate on this 
please'.' 

Imtiaz Haq 
Doha, Qatar 



Piracy Rebuttal Rebuttal 



This concerns the letter from Donald Moses 
concerning The Black Rose. You don't 
understand! Low Life Scum like us have to 
pirate, or else my computer would be a $2500 
doorstop! Pirating gives us access to lots of 
programs that there is no way we could afford. 
No way! I use them for school reports 
(Printshop, Word Juggler) and I get good grades 
because my reports are neat. Some of my 
Commodore friends who have no pirating 
access spend all their money buying programs. 
1 couldn't waste my money on over priced 
software! 

Yes pirating is stealing, I couldn't agree 
more. But, I just could not afford not pirating, 
1 feel guilty doing this white-collar 
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crime , How much could companies bring their 
price down by'! A lot! A S40_(W) program will 
sell for $20,00 dollars from Programs 1'ltis. So 
don 'l tell mc they're not ove re h arging us! 

Well I'm sorry you reel the way yon do, J 
tee I you are missing a large sun ware library 
(stolen, if you will) that could multiply your 
computer's capabilities! But there is no Way to 
afford them. 

A conscrv alive pirate (and poor!) 

The Chemist 
Chuiloitesville. VA 



A Happy Computist 



I am happy to renew tny subscription for an 
Apple magazine that pays for itself in jusL a 
"few miserable pages.., oliext" (as stated bv 
George Blank in COMPUTIST No. 28). I left 
out the "'hard to read" because 1 don't see how 
he can say this. The print is not smeared or 
smudged, the context is in a format that is easy 
to understand for both laymen and die long lime 
programmer and you give short easy steps as 
well as expounding on the process. Hard to 
read? Definitely nol! As for the "few miserable 
pages," yes, they arc few but not at all 
miserable How can they be? Why just one page 
of one issue can pay for the entire year's 
subscription 

When I heard of ACS (Adventure 
Construction Set) by Electronic Am, I was so 
intrigued by the idea of making my own 
adventures that 1 purchased it as soon as it hit 
the market. Approximately 83 days later it 
"bombed" (two months prior to the softkey in 
COMPUTIST No. 24). Since the jt0 day 
warranty wasn't quite up, it only cost mc 
shipping and handling for a new copy, which 
came with a letter insinuating that the problem 
might be my disk drives, Five years of running 
other software without any problems at all made 
me douhi ii was the drives. My mind was put 
to ease when I saw the softkey to this program 
(which worked flawlessly) and knew 1 never 
had to worry about this again. 

In reply to George Blank's response in 
COMPUTIST No. 28, I would rather pay 
twenty dollars for a magazine that's 100% 
Apple than one that's only 16% Apple and if 
George writes his "ingredients" as other 
manufacturers (listing highest quantity to 
lowest) we sec he puts ads and general articles 
before any eomputer material I wouldn't worry 
much about nol getting his support, he's 
probably afraid of losing customers to a real 
Apple magazine, and CALL-APPLF.? 



Personally, 1 never really eared for theirs when 
it first came out and I haven't looked back since- 
One final note. 1 do see how George can say 
that casual copying hurls profits. The company 
doesn't get any money ($5 00 - S50.00) for 
repai rs/ re placements to those "bombed" disks 
after [he 90 day warranty because we don't use 
the original I understand the software 
companies say that we are nor buying products. 
but only leasing theni. All I can say to that is. 
"when that gets enforced, they've lost my 
business altogether.'' 

David L. Go forth 
Indian Springs, NV 

Mr. Gofoith: Vie advertisement for "The Beat 
of Hardcore Computing" on page 30 of 
COMPUTIST No. 28 which contains the George 
Blank response yon refer to is a reprint of the 
last page of Hardcore Computing Update 1.1 

which was published in the. foil of 1981. 

Tills ad was a direct result of somebody 's joy 
that Creative Computing has ' 'hit the dust. ' ' 
You see. for a while this magmjw would refuse 
to run our ads in a desperate attempt to keep 
the genera! public in the dark about copy 
protection (and deprotection). Only later in time 
after-copyprotection information slowly leaked 
out (through Hardcore Computing and other 
pioneers) did they finally submit to the ewfitl 
' 'disgrace ' ' of publishing Hardcore ads. 

As it has done so many times in the past, the 
course of time has only allowed the survival of 
the fittest. Ton bad for Creative Computing. 
Maybe next time. 




COMPUTIST No. 28: 



Softkey for Ultima IV; 

The "POKE 47829, 13' 
be a "POKE 47829,213. 



in line 1W60 should 



COMPUTIST No. 31: 

Black Box; 

The BASIC program listing has two errors 
Substitute the following lines for the 
corresponding ones appearing in COMPUTIST 

No. 31: 

360GOSUB780: I F PX = 2 THEN PX - 0: PY = 2 * (PV 
= 0) + 11 * (PY=13) GOTO 420 



750 HOME : TEXT : VTAB 
IS* " INT (5- 10 



■ PR I NT 'TOUR' SCORE" 
({M - 8) / m) "V 



Most 

Wanted 

List 

Need help 

backing-up a particularly 

stubborn program? 

Send us the name of the program and lis 
manufacturer and we'll add it to am 
Musi Wanted List, o column (updated 
each issue) which helps to keep 
COMPUTIST [Udder:; informed ot the 
programs for which saffkeys ore MOST 
needed Send your requests to: 

COMPUTIST 

Wanted List 

HO Box 110846 K 

Tacuma, WA 98411 

If you know how to dapmtect 

unlock, or modify 
any of the programs belnw. 
let us know You'll be helping your fellow 
COMPUTIST udders nnd earning 
MONEY at the same lime Send the 
information to us in article form fin a 
DOS 3.3 diskette. 

Mouse Calc Apple Cum pule i 

Apiili> Business Graphic-i Apple psraplitsi 

June Ark [runic* 

Yisililriid Micro lab 

Catalyst Quark. I tic 

fiutenburi! Jr. & Se, MiefEuiiartltm t.rn> 

Prime flutter Prir&sofi Corp. 

The Handlers Silicon Vjllcy System.- 

The Apple's Cure: 1'arls 1-3 '("he Professor 

Fun Hunch llniL'om 

Wills' Byte .,, VWa trek 

Terrapin T.uko V2.00 Terrapin S&ihftsre 

Oman iSsltasofl 

Cycluid Swttis Sonyvaffl 

Adventure Micrnsnlr 

Cranston Manor Sietis (hi- Line 

Nimble BmuY-rhiJiLii 

Knbnt War MBM 

ABM Mux 

Myclicss II Dulamosl 

K-Z Learner Sitifien Valley Systems 

Story Tree Scholastic 

A$;i"iit U.S.A. .Scholastic 

I tan die alpine. System Spons Incite 

Dollars & Sense Mumi^rjun 

Echo Plus Ajtmnat Sysimiii 

Grtai Cross Country Road Rate Aclkislori 

Kusler Bluster Bud^c Inc. 

GATO vt.3 Spectrum Uololiytc 

Odin (Jdesta 
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readers' softkey A copy exchange 



Roger Sum-on & David Chun-wui's... 



Softkey for 
Print Shop Companion 



Broderbund Software- inc. 

17 Paul Drive 

San Rafael, CA 94903 

$39.95 

Requirements: 
64 K |1 Plus. Its or //C 
Super JOB 1.5 
Blank disk 

The Print Shop is a powerful primer 
program. Ii can be. used to make signs and 
greeting cards to send to other people. It can 
also let you create your own graphics for the 
cards, but you cannot edit the fonts or the 
borders. The Print Shop Companion is an 
addition to The Print Shop that lets you do that 
and much more with an enhanced graphic 
editor, font and border editors, and a creature 
maker (mix heads, bodies and legs of various 
characters) , 

The Print Shop Companion is similar to the 
Print Shop, in that it allows you to make a 
backup (only one). But when 1 tried to use the 
original Companion to update the softkeyed 
Print Shop (COMPUT1ST No. 17. page 13). 
the computer hung up. I found that the program 
is looking for the protection on track $22. So, 
I tried to fix it. 

When looked at The Print Shop Companion 
with a rubble viewer. I found that live protection 
is similar to the Print Shop's. Tracks 0-S2 1 are 
in u normal format and truck S22 is in a very 
strange format. This track is checked by (what 
else?) a nibble count routine, 

Aftei boot code tracing the piogram, I found 
that the start of the nibble count routine is at 
SB619, just like Print Shop. It fills page SBB00 
with SFFs and reads the disk for tour markers 
(.$D4,$D5.$DE,SD4)and read a pair of 4+4 
encoded bytes. Then it jumps to SB6B5 to read 
two more markers ($F5, SAA) and follows a 
process similar to Print Shop's to check the 
bytes on the disk. 

First time I tried to disahle it by simply- 
putting an R1S ($60) at SB619 (on my PSC disk 
it's at track 3, sector 6, byte $19). Look for 
the sequence SAW TO A9 IT, which is LDY 
#$00, LDA #$FF. 

It booted up without checking the nibble 
count, but when I used it to print a calendar, 
it just printed a lot of rubbish, I figured this was 
because of some checksum on the nibble 
routine. To make the checksum come out all 
right, I added the original two bytes at 
SB6 1 9-SB6 1 A together and came up with a sum 






CRERTURE MAKER 




USE UP X 

xDOWN TO 

* SELECT 

./ PART. USE 

LEFT A RIGHT 

TO SELECT 

CREATURE. 



HERD 
BODY 
LEGS 



CLOWN 



PRESS <RETURN> WHEN DONE 



of SA0. So I put a $40 at SB61A to go with 
theS6Bat5B619(S60 + 540 = SA0) and The 
Print Shop Companion worked! 

Now thai the softkey for The Print Shop 
Companion is finished, the built-in copy 
program must be removed because it is no 
longer needed and the system will hang up if 
you press the Escape key while booting. The 
Companion has two checks for the Escape key. 
One is at track SO. sector S4, bytes $FC &. JED, 
and the other is at track SB, sector $8, bytes 
SB0 & $B1. Replace the SC9 9B (CMP #S9B) 
with $A9 01 (LDA #$01) and the Escape key 
will be ignored. 

To deprotect the disk, just use the controller 
below in Super [OB 1,5 and RUN it. The 
controller will make the necessary sector edits. 
Now you should have a COPYAablc version 
of The Print Shop Companion. 



5000 DATA 6" 


CHANGES 


5010 DATA 


4 ,252 ,m 


5020 DATA 


4 ,£53 ,1 


5030 DATA 3 


6 ,25 96 


5040 DATA 3 


6 ,26 .64 


5050 DATA 11 


.8 176 ,169 


5060 DATA 11 


8 177 ,1 


controller checksums 



1000 - 1356B 5000 - SF62B 

1010 - $0715 5010 - JF04A 

1020 - S0A5C 5020 - $7663 

1030 - SC4DB 5030 - S6001 

1040 - SF817 5040 - S1F20 

1050 - S2A47 5050 - SS2B9 

1060 - S0FC6 5060 - S56A7 



controller 



1000 REM PS COMPANION CONTROLLER 

1010TK = 0.:LT=34 .ST = 15 :LS=15 :CD=WR :FAST 

= 1 
1020 GOSUB 490 . RESTORE : GOSUB610 
1030 GOSUB 490 : 11 = TK : TK = PEEK (TRK ) - 1 : 

RESTORE : GOSUB 310 :TK = TL : GOSUB 610 
1040 IF PEEK (TRK) - LT THEN 1060 
1050 TK = PEEK (TRK) : ST = PEEK (SCT) : GOTO 1020 
1060 HOME : PRINT ,, C0PY° DONE' 1 : END 



CALENDAR: CENTER 



HIGHLIGHT SPECIAL ncCOSIONS 



MARCH, 1386 
S M T W T F 



H Ml 11 12 13 11 15 
16 17 18 13 20 21 22 



MOVE 

CURSOR 

TO SELECT 

DATE 

PRESS 

(RETURN! 

TO ENTER 

TEXT 



\bsL> IU UU BULK 
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readers' softkey & copy exchange 



Doni G. Grande 's softkey for. 



17 :5T = 15 :LS= 15 : CD - WR : 
REMTS01 ,SS0S TO TS10 ,S$0F 



Kracking Vol II 



Pi rales Harbor 

POB 8928 

Boston. MA 02114 

Requirements: 

Apple |j or better 
Super 108 vl.5 
Sector editor 

Pirates Harbor puts out some really good 
cracking tips disks and the ones by Disk Jockey 
are about the best Strangely enough, the newest 
one is copy protected, However, if you have 
fully digested the information given in earliei 
volumes, this disk is very easy to copy. 

Examination of the disk shows that Track 
$00, Sectors $00-509 and Track $11, Sectors 
$00 -$01 are in normal DOS format whereas the 
rest of the disk has altered data prolog marks 
of D4 AB AD instead of D5 AA AD. Also, the 
disk does a checksum to see if anything has been 
changed and hangs if so. The utility "Snoopy 
and the Doctor" included on the disk re-patches 
Ihe data marks when it is executed, so this must 
be defeated too. 

Step by Slep 

1) Install die controller with this sofLkey in 
Super IOB v 1 .5 and copy the original disk. This 
controller is a good example of how to copy 
partial tracks with Super IOB vl.5. 

2) Make the following changes using a sector 
editor 



TracK Sector Byte From 



To 



$00 


$02 


S53 


$04 


$D5 


$00 


S82 


S5S 


$AB 


$AA 


m 


$02 


SE7 


$D4 


$D5 


m 


$02 


S ; l 


SAB 


$AA 


%w 


I0F 


SC2 


$4C 


$60 


$06 


$07 


m 


$D4 


$05 


m 


$07 


m 


$AB 


$AA 


controller 



1000 REM CRACKING BY THE DISK JOCKEY II 

CONTROLLER 
10I0TK = .LT=1 :ST = 9 :LS = 15 :CD = WR : GOSUB 

1100 :FAST=1 : REMT$00 ,S$0-9 
1015 RESTORE : GOSUB 210 
1020 TK = :LT = ;ST= 15 : LS = 9 :CD = tVR : GOSUB 

1100 . REM TI00 .S$0A-S0F 



= 13 ;ST = 
REM TS11 



1 : LS - 

.SS00- 



15 
$01 



CD = WR 



:CD = WR 



1022 TK= 1 :Li- 

GOSUB1100 
1025 GOSUB 230 
1030 TK= 17 :LT 

GOSUB 1100 
1035 RESTORE : GOSUB 210 
1040 TK= 17 :LT= 17 :ST = 15 :LS= 1 

GOSUB 1160 ; REMTJ1I ,S$02-$0F 
1042TK=18 LT = 35 :ST= 15 l LS = 15 :CD = Wfi : 

GOSUB 1130 : REHT$12 S$00 TO T$22 S$0F 
1045 GOSUB 230 

1050 HOME .PRINT "COPY" DONE" : END 
1100 RBI RtAD/iVRITE SUBROUTINE 
1120 GOSUB 490 : GOSUB 610 
1130 GOSUB 490 : GOSUB 610 . IF PEEK (TRK ) = LT 

THEN 1150 
1 140 TK = PEEK (TRK) :ST = PEEK (SCT ) .GOTO 1120 
1150 RETURN 
5000 DATA 212 ,171 .173 



controller checksums 


1000 


- $356B 


1042 


- $1731 


1010 


- SE7DA 


1045 


- $96D6 


1015 


- $4ABB 


1050 


- $0211 


1020 


■ $8503 


1100 


- SCD4B 


1022 


- $1804 


1120 


- IE65A 


1025 


- $49CD 


1130 


- S75F4 


3030 


- s?ns= 


1140 


- JASU 


1035 


- $BFC9 


1150 


- S169D 


1040 


S280F 


5000 


- $54DD 



i 



Jeff Rivett 's softkey for. 



Moebius 



lj>rd British/Origin systems 

340 Han'ey Road 

Manchester, Nil 03103 

Requirements; 

48K Apple or compatible 
MOEBIUS original disk 
A blank disk 
Super IOB vl.5 



Tricks of the trade #542 - if you can 
deprotect a disk produced by a certain company , 
and you have another disk by the same company 
that you want to deprotect, try the method you 
used on the first one before you do anything 
else. 

I was very impressed with Mike Roetman's 
article on ULTIMA IV in COMPUTIST No. 
28. The translate table protection is one I had 
never heard of. Should the POKE 47829, 1 3 in 
line 1060 be POKE 47829,213? 1 did it the 
second way and it worked. 

MOEBIUS also happens to be by Origin 
systems, so I tried the ULTIMA softkey on it. 



The IOB controller worked like a charm, 
producing a DOS 3.3 formatted disk. As in the 
softkey for ULTIMA, however, some further 
modifications were needed before the copy 
would run. 

I assumed that since the protection scheme 
had been identical up to this point, the 
modifications would at least be similar to those 
in the ULTIMA softkey. The ULTIMA mods 
involved changing two STA instructions to all 
NOP's, and swapping a $B7 with a SE8. 

I searched the disk for die two STA 
instructions (8D5DBD and 8D2CBF), and 
found them in track $04, sector $07 and track 
$03. sector S00. I looked at the code in those 
sectors and came up with the changes listed 
below. 

Step by Step 

1) Boot a disk with your favourite DOS. 

2) From BASIC, enter the following line. This 
lets DOS BR UN the boot program. 

POKE 48514,52 

3) Initialize a disk with the following line: 
INIT BEO OOT 

4) Run IOB with the controller tor ULTIMA 
IV, using the disk you made in step 3 as the 
destination. 

5) Make the changes in Table I below. If the 
value at one of the locations is already the same 
as the "To" value, leave it alone. 

Table 1: 

Track Sector Byte From To 



33 



(14 



0? 



37 


E* 


67 


39 


B? 


E8 


it 


8D 


EA 


4S 


5D 


EA 


4A 


BO 


FA 


-in 


SB 


EA 


it 


2C 


EA 


i-r 


SF 


tA 


■A 


SD 


EA 


57 


5 LI 


LA 


58 


FD 


FA 


55 


80 


EA 


5C 


2f 


FA 


3Li 


BE 


FA 


5F 


It 


F7 


61 


G7 


E8 


BS 


s:< 


EA 


% 


5D 


EA 


S7 


m 


EA 


sA 


iiL 


EA 


BK 


2C 


EA 


ec 


BF 


EA 


BE 


Fh 


B7 


CO 


37 


-8 
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readers' softie ey & copy exchange 



Bill Sckerer's softkey for. 



Mouse Budget 
Mouse Word 
Mouse Desk 



International Solutions, Inc. 
910 W. Maude Ave. 
Sunnyvale, CA 94086 

(408) -773 -0443 

Mouse Budget: $69.95 

Mouse Word: $129.95 

Mouse Desk: $39.95 

Requirements: 

COPYA 

A sector editor 

Blank disks 

fit or fit with 65C82 

A Mouse 

Mouse Budget is a mouse-hased personal 
budget program. It incorporates the pull-down 
windows and menus similar to the Macintosh. 
The program tracks deposits and expenditures 
by allowing you to define up to 60 separate 
accounts. Any account can be instantly viewed 
in windows on your screen. Mouse Budget also 
allows you to see your total net worth or yearly 
budget for any category. 

The protection is easily defeated by first 
making a backup of the original with COPY A. 
Then use a sector editor to make the following 
change. 



MOUSE BUDGET 
Track Sector Byte From To 



SI 3 ISC 



^44 



A3 



IS 
60 



Mouse Word is a mouse based word 
processor with sophisticated text formatting 
performed by using the mouse, a mail merge 
feature, an on-screen calculator, and a 
communications function for use with a modem. 

The protection is easily defeated by first 
making a backup of the original with COPYA. 
Then use a sector editor to make the following 
change. 

MOUSE WORD: 
Track Sector Byte From To 



S0F S0D 



S0A EC 37 



down windows. Mouse Desk makes the Apple 
// series similar to the Macintosh where you can 
point and click the mouse to easily move, copy, 
and delete files on the disk. You can also switch 
back and forth between programs without 
rebooting. 

The protection is easily defeated by first 
making a backup of the original with COPYA, 
Then use a sector editor to make the following 
change. 

MOUSE DESK: 
Track Sector By Le From To 



50C 504 



554 D0 F0 



a 



Charles Taylor's softkey for. , . 



Adventure 
Construction Set 



Electronic Arts 

2755 Campus Dr. 

San Mateo, CA 94403 

Requirements: 

Copy program that can ignore errors 

Sector editor 

Four blank disk sides 

After trying unsuccessfully to copy 
Adventure Construction Set using Steve and 
Rod Smith's method in COMPUTTST No. 24 
(Page 10), I realized that I had a different 
version. In addition to not working after 
applying the softkey, my version gave a copy 
error only on track 6, not tracks 5 and 6 as 
described in the article. 



1 successfully copied my Adventure 
Construction Set by studying the Arclton 
softkey (same article). I took my non-working 
copy and searched it for the byte sequence of 
&4C 69 xx (as in JMP Sxx69), 1 found it in three 
places, twice on track 1 , sector F (4C 69 A0) 
and once on track 9, sector B (4C 69 4D). After 
studying the code, I decided that the code on 
track 9 did not involve copy protection. I 
changed the two occti rrences of 4C 69 A0 to 
18 60 DD as suggested, wrote them back to my 
copy, and 1 had a working back tip of Adventure 
Construction Set! 

Be sure to disregard the ASCII string 
"DON'T BREAK THIS GAME" found on 
track 1, sector SE. 

Summary 

J) Copy the label side of the program disk with 
a program that will ignore the copy error on 
track 6. 

2) Using a sector editor, make the following 
changes and write them hack to your copy; 

Track Sector Byte From To 



$01 


$0E 


$4? 


$20 


518 


$01 


$3E 


$48 


$F8 


$60 


$$] 


S3t 


$49 


$A0 


$80 


m 


&:: 


$4A 


$B0 


$70 


S3: 


$0F 


$00 


$4C 


$18 


S3, 


$0F 


$01 


$69 


$60 


$01 


$0F 


$02 


$A0 


SDD 


$01 


IBF 


$6F 


$4C 


518 


181 


$3- 


$70 


$69 


$60 


id: 


S3 Z 


$71 


$A0 


SDD 


$07 


SI)-" 


$52 


$53 


S74 


$07 


ffl 


$56 


$25 


S04 



31 Copy the other three sides with a normal 
copier. 

£ 



Mouse Desk is a desktop organizer and 
program selector that uses the mouse and pull- 
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Revisiting the softlcey for... 



PL UNBELIEVABLE 



tJiJ'jtj *■» \ umbel evi 

music ^ 

CONSTRUCTION SET 



COPYRIGHT 'X' I3SH WILL HftRUEY 



by Joseph Weeks 



Electronic Arts 
2755 Campus Dr. 
San Mateo, CA 94403 



HequirementST 

48K Apple || aod up 
A blank disk 
Super IOB 

When I purchase a piece of software, I first 
test it, then I embark on the task of backing it 
up. Usually 1 am fortunate to find a softkey in 
COMPUTIST which will do the job for me. 

I found Musk Construction Set to be an 
excellent program that becomes a fantastic 
program if you have a Mockingboard. I checked 
COMPUTIST and found two Softkey s for 
MCS, one in COMPUTIST No. 9. page 7 and 
one in COMPUTIST No. 12, page 27, wliieh 
even had a key for two versions of MCS. 

Much to my dismay it soon became apparent 
that Electronic Arts had totally revised their 
copy protection on MCS and neither softkey 
would come close to cracking my version. This 
forced me into the enjoyable but sometimes 
frustrating task of hoot code tracing. 

The Protection 

The protection scheme being used is one that 
seems to be quite popular in newer software, 
because it is uncopyable (see COMPUTIST No. 
24, page 21), The disk is normal DOS 3.3 and 
can be copied with COPY A except for track 6. 
The reason for the unreadability of track 6 is 
that using very accurate recording equipment, 
tracks 5 and 5.5 were written identically. The 
data on track 6 is actually "track bleeding" 
from track 5.5 and is therefore unreadable. If 
you try to copy the disk with a nibble copier. 



the Apple drive can't reliahly copy both track 
5 and 5.5, and therefore the copy will fail the 
protection check and will not boot all the way. 

The Boot Code Trace 

Although boot code tracing isn't required to 
perform the softkey, it was required for me to 
determine how, where, and what code needed 
to be modified to bypass the protection. If you 
do not wish to I earn anything about boot code 
tracing this disk, skip straight to the end and 
copy it with Super IOB. However, you should 
read on. You might learn something. 

Following my standard procedure for boot 
code tracing, wc first write a known value to 
all user memory. I usually use $11 or $00. 

CALL- 151 

sm-.m 

8»I<8fle.BFFFM 

Although the clearing of memory to zeros 
isn't necessary in this case, it always provides 
a method of looking through memory to see 
what has happened if you can't figure it out by 
disassembling the code. Next we move the boot 
code from ROM to RAM, change its exit to 
JuMP to the Monitor rather than the next stage, 
then execute the boot code, Note: this assumes 
an Apple Disk ][ controller in slot 6. 

96W<C6M.C6FFM 
9fiF9:59 FF 
96WC 

'['he drive will come on and shortly you will 
get a beep as you jump to the monitor. Turn 
off the drive and see what we have. 

C«E8 
881L 

This is what wc get: 



301- 4C 
804- A9 
306- 80 

809- A9 
80B- 8D 
80E- 49 

810- 8D 
813- A9 
815- 8D 



04 08 
00 

F2 03 
C6 

F3 03 
A5 

F4 03 
00 
C7 09 



JHP $0804 

lda §m 

STA $03F2 

LDA ttm 

STA J03F3 

EOR #$AS 

STA S03F4 

LDA M00 

STA $09C7 



;Set the Reset 
; vector to 
; SC600 



;Put 500 
; at S9C7 



813- 
31B- 
81D- 
81E- 
320- 
822- 
824- 
827- 
829- 
82A- 



AD £9 C0 
A9 B7 
48 

A9 B0 
85 3E 
A9 00 
20 00 0C 
A9 FF 
48 

A9 00 
82C- AD C7 09 
82F- D0 D3 
831- 4C 05 A0 



LDA $C0E9 
LDA #SB7 
PHA 

LDA MB0 
STA $3E 
LDA SS00 
JSR 10C00 
LDA «FF 
PHA 

LDA #$00 
LDA S09C7 
BNE {0804 
J MP S0A05 



;Turn drive on 

.Push a $B7 
:Store a IB0 
; at S3E 

:Loaa track 

.Push an SFF 



(jump thru RTS) 



Looking at location $800 we find an $05 
meaning the boot code has brought five sectors 
of track into memory from $0800 to $0CFF. 
The code starting at $801 first sets up the 
RESET vector to 5C600 then turns the drive 
on. Next a $B7 is pushed onto the stack, a $B0 
is stored at $3E. and a Jump SubRoutine sends 
us to $0C00. The code at $C00 will eventually 
load the entire track into memory from SB000 
to SRFFF then return. Upon returning, an JEFF 
is pushed onto the stack and then we JuMP to 
S0A05. This is the hidden exit from this stage 
of the boot to the next stage. The entry point 
to the next stage is on the stack. The code at 
$A05 is only there for confusion and the only 
important part of it is the RTS at die end , Since 
we JuMPed and not JSRed to S0A05, when the 
RTS is executed, we will effectively jump to 
die last two bytes on the stack ($B7FF) plus one 
or $BR00. Very clever, but once found easily 
defeated. 

831:59 FF 
801G 

Normally you can't directly execute each 
stage of a boot, but because each stage of MCS 
has code within it to turn on the drive, it is 
possible. The drive will turn and then we get 
a beep as we again jump to the monitor. Turn 
off the drive and see what we got. 

C»E8 
B8ML 



10 



COMPUTIST No. 32 



B800- 


m 00 


„DV 


nm 


B802- 


84 4C 


STY 


$4C 


B804- 


A9 20 


LDA 


ffS20 


B806- 


85 ID 


STA 


$4D 


B808- 


A9 FF 


IDA 


MFF 


B80A- 


91 4C 


STA 


(54C),Y 


B80C- 


C8 


NY 




B80D- 


D0 FB 


EN: 


SBB0A 


B80F- 


E6 4D 


INC 


$4D 


B811- 


10 F7 


SP1 


$B80A 


B813- 


A2 30 


LD.v 


S$30 


B815- 


20 BB B9 


JSN 


SS9BB 



This code begins by putting $FF's from 
$2000 lo S7FFF, then the X is loaded with S30 
followed by a Jump SubRoutine to SB9BB. The 
code following this seems to be invalid so 
$B9BB must be where it all happens. 

You can list and try to follow the code at 
SB9BB if you wish, but I'll be honest and say 
I got lost fast. There are loops and look-up 
tables and who knows what else. At this point 
I became just a little frustrated and so in hope 
of finding something recognizable, 1 listed the 
entire code from SB04M to $BFFF. 

The code from &B500 to B6FF seemed very 
suspicious. At $B503 was a routine which does 
direct disk access, looks for a normal DOS 3.3 
data header, ($D5AAAD), then looks for a 
bunch of $B4's. I assumed this to be the 
protection check because an earlier examination 
of track 5 and 5.5 with a nibble editor presented 
a bunch of SB4*s, So now the task again 
appeared simple, find the call to this routine and 
defeat it. 

I decided that an RTS placed at location 
SB660 should do the l rick, but when any byte 
from &B500 to SB6FF was changed, the system 
would become confused. Electronic Arts is 
evidently doing a checksum on these pages of 
memory, to discourage such attempts as ours. 
This probably takes place in the code I got lost 
in. 

Checksum rotitines usually count bits. I 
wanted lo change the byte at SB 660 from a 520 
to a $60, which is adding $40 to the sum in that 
page of memory. If I subtracted $40 hits 
elsewhere from that page it should balance and 
work. Right? Can't hurt to try. 

B660:6fl 
B6FFt82 
B80B{t 

It BOOTS! Changing two bytes will remove 
the boot protection on the MCS disk. The demo 
will play, but when option selection is finished 
we get the message: INSERT MCS DISK AND 
PRESS A KEY. Curses! Another protection 
check to be defeated. 

I opened the disk drive door and pressed 
RESET twice, then entered the monitor and 
started printing all valid looking code from $809 
to SBFFF. Looking through this I found what 
seemed to be code identical to that found at 
SB500 to $B6FF in the second boot stage. 
However, this code was from S4C0B to S4DFF. 
I then searched the disk for this code but was 
unable to find it. It must cither be self- writing 
or encrypted on the disk, probably the latter. 

Not having given up yet, I then looked for 
the calls to these protection check routines and 



found them along with some other protection 
related routines from $A39C to $A7FF. 
Fortunately 1 was also able to find this code on 
the disk on track SC, sectors 0, 2. and 4. Armed 
with their locations it is easy to change or 
bypass them. 

On my disk the edits required were as 
follows: 



Track Sector Byte From To 



rack Sector 


Byte 


From 


To 


C 


60 


20 


60 


C 


FF 


C2 


82 


C 


EC 


2fi 


18 


C 


EO 


W 


60 


C 2 


7? 


Cr 


6S 



Step by Step 

1) Install the controller program at the end of 
this article into Super IOB vl.5. 

2) Copy the Music Construction Set disk with 
Super IOB, saying yes to the format option. 

More Stuff 

Later, I purchased a newer version of Music 
Construction Set with a new option for selecting 
a printer interface. I tried this same controller 
on the new disk to make a backup. The copy 
booted fine and would run the demo but would 
either bomb into the monitor or tell me to in sen 
the original MCS disk if I tried to start the 
program. 

I cheeked and found the code which was 
added to provide the new printer interface 
option had caused the location of the JSR $4CO0 
that went to check for the original disk to move. 
On my first version it was at SA7EC (track C, 
sector 0, byte SEC), but on the new version it 
was at $A836 (track D, sector F, byte $36). 
When properly patched it gives a working 
backup. 

The following sector edits should replace the 
third and fourth sector edits in the Super IOB 
controller and the table above if your version 
of MCS asks for the type of printer interface. 



D F 

D F 

In the controller, 

statements. 



36 

37 [ 

substitute 



4C 



18 

3 60 

these DATA 



5030 DATA 13, 15, 54, 24 
5040 DATA 13, 15, 55, 96 

There are probably more than just these two 
versions of MCS around (or are coming). If 
diese edits fail, try just searching for JSR S4C00 
(20 00 4C) and replacing it with a CLC, RTS 
(18 60). 

controller 

1000 REM MCS CONTROLLER 

1010ST = 15 :LS = 15 :FAST = 1 :CD-WR 

1020 TK = :LT = 6 : GOSUB 1050 

1030 TK= 7 . LT = 35 . GOSUB 1050 

1040 HOME : PRINT "COPY" DONE 11 : END 

1050 GOSUB 490 ; GOSUB 610 

1060 T1=TK TK = PEEK (TRK ) - 1 : RESTORE GOSUB 

310 :TK = T1 
1070 GOSUB 490 : GOSUB 610 ■ IF PEEK (TRK ) = LT 

THEN RETURN 
1080TK = PEEK(TRK) .ST = PEEK (SCT) . GOTO 1050 
5000 DATA 5' CHANGES 
5010DATA0 ,12 ,96 .96 

,255 ,130 

,236 ,24 

,237 ,96 

,119 ,24 



5020 DATA ,12 
5030 DATA 12 ,0 
5040 DATA 12 ,0 
5050 DATA 12 ,2 



controller checksums 



000 - S356B 

010 - S16BA 

020 - 56362 

030 - S2E19 

040 - SD5A4 

050 - $6D35 

060 - S745B 

070 - $7F39 



1080 - $E172 

5000 - S73AE 

5010 - W2A 

5020 - $0D37 

5030 - SD6EE 

5040 - $ADFC 

5056 - J8DCA 




?7* .. 



Keu c 



nam 



m 8 m oga 









V 





*1 


Si 


53 


% 


m 


-0= 
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softkey for... 



CUBIT 



by Panagiotis Simatos 



Micromax Systems, Inc. 
6868 Nancy Ridge Drive 
Sun Diego. CA 92121 



Requirements: 

Apple ][ series computer 

A way to Reset into the monitor, or 

A plug-in language card. 

This is a softkey tor the game Cubit 
(distributed by Mieromax), with which I would 
like to emphasize on how to ' grab" the game 
from memory using a language card, or any 
other memory card, in case you have no other 
way of resetting into the monitor. 

If you arc an experienced unprotector, you 
may skip most of the following and go directly 
to the slep-by-stcp "grab" procedure. 
However, I would suggest that you hang on, 
since you may find some of the ideas that follow 
useful. 

Whenever I decide to remove the copy 
protection from a game disk. I start paying 
attention to the following: 

- The booting sounds, in connection with the 
booting time and whatever appears on the 
screen. 

- The disk access during play, if any. 

- The effext of RESET during play. 

Now let's see how these apply to Cubit. First 
of all, it takes a long time to boot, which means 
thai, it is not a ' 'quick-loader' ' . By this term we 
mean disks with a special sectorless format, 
which load at lightning speed. The DOS on 
these disks is severely altered. This is certainly 
not the case with Cubit, You should also notice 
an extra "click" during the start of booting. 



This is the disk arm recalibrating 10 track 0, 
The only thing that appears on the screen during 
booting is the Applesoft prompt. 

From the above we can easily reach the 
conclusion that the DOS formal of Lhe disk has 
not been altered too much. With this in mind 
we go on. 

Now it is time to examine disk access during 
play. In this case an experienced ear should 
easily realize that nothing is really loaded from 
the disk between rounds. The disk access that 
occurs seems to be a routine check of the 
program to sec if the original disk is still in the 
drive. Keep this in mind, since this routine has 
lo be defeated at a later stage. 

What about the Reset key? If you try to press 
Reset during play, you will find that the 
program starts all over again. This is a feature 
that annoys me extremely, since the only way 
to quit the game is to turn the power off. 
However, speaking of unprotection, this feature 
is a blessing, since it reveals that the Reset 
vector (memory locations $3F2 and $3F3) holds 
the program stan. Be careful not to confuse the 
program start with the code start. They may or 
may not be the same, 

It seems thai the normal FF sync bytes have 
l>een changed to a couple of different sequences, 
one proceeding the the address field header and 
one preceeding the data field header. 
Furthermore, the address and data field end 
marks have been changed to FF FF. 

Anyway, a good bit copier, like Locksmith 
or Copy ][ Plus, should be able to recognize 
these alterations. You should copy tracks $TO 
to $22 in normal mode. However, in order to 
come up with a bootable copy, you should also 
do the following; 

1) Rccopy track $00 synchronized (remember 
that extra arm recalibratiou to track $00 during 

booting'?) 



2) Write-protect your copy before booting. This 
applies to a considerable number of commercial 
programs. 

From now on you should set aside your 
original disk and use only the copy. Since we 
have discovered that there is no actual loading 
of code during game play, we will "grab" the 
program code directly from the computer's 
memory and save it as a normal binary file. For 
this reason you should now format a normal 
DOS 3.3 48K slave disk with the hello program 
deleted, If you wish, you may use a fast DOS. 

We will now need a method of resetting into 
the monitor. A brief discussion of this is found 
on the inside front cover of every COMPUTIST 
issue. I am going to describe an extra method, 
which involves lhe use of a common Language 
Card, or any other extra memory eard (I 
personally use a 32K Saturn card). 

The basic idea is lo write-enable the card, 
copy the whole ROM onto it, modify the reset 
routine for jumping into (he monitor and read- 
enablc the card. Thus, when the Reset key is 
pressed during program execution, a monitor 
jump will be forced, since the computer thinks 
that the ROM is in the card. 

Now the bad news. A lot of software 
protectors are aware of ihistnck. So they have 
included a routine in their programs to check 
the existence of a memory card in slot 0. If a 
card is found, it is read-disabled and the whole 
idea fails. 

However, there is a way around this. We will 
move our eard to another slot. If the check 
routine does not bother to examine slots other 
than 0, we will succeed. This is exactly the case 
with Cubit. 

More bad news: Some commercial programs 
include routines that check the existence of 
memory cards in all slots. For example, Zenith, 
Horizon V, and Lady Tut do this. The Ibl lowing 
procedure is not applicable to these programs. 
If you have another way into the monitor, jump 
to step 7. 



12 



COMPUTIST No 32 



The Procedure 

1) Turn off the power and move your RAM 
card to another slot. Slot I is what most people 
use, but I usually select slot 5 (the only one 
empty in my Apple). 

2) Turn your computer on without booting. 
Press RESET to stop the drive and enter the 
monitor with CALL -151. 

3) Two successive PFFKs to $C08] will write- 
enable your language card in slot 0, so if you 
moved your RAM card to slot 1, you would 
type this from the monitor: 

C091 N CB91 

This enables die Read ROM/Write RAM mode 
of your card. If you have seleeted a slot other 
than 1 , you should consult (he following tabic 
for the addresses you need. 



Card in 


Read 


Write 


Slot: 


RAH: 


RAM. 





C030 


C0B1 


. 


C090 


C091 


1 


C0A0 


C0A1 


3 


C0B0 


C0B1 


4 


C0C0 


C0C1 


5 


C0D0 


C0D1 




4) Now wc will copy the image of the whole 
ROM to the card by "moving" it to the same 
place we read it from. When the move routine 
writes each byte to its "new" location, the 
RAM will accept it because we have allowed 
it to read now. Notice that die source and 
destination addresses arc the same for this move 
command, 

5) This modifies the RESET routine in the F8 
ROM for a direct jump to the monitor, 

FA62: 4C 59 FF 



6) A PEEK to SC080 will disable the ROMs, 
read -enable the RAM, and w rite-protect the 
RAM on a slot RAM card (yes. all al once). 
For slot 1 . just look at $C090 with the following 
command . 

C»9» 

Again, consult the tabic for another slot. 

7) Insert the Cubit copy in your drive and boot 
it. 

C6HMG 

8) As soon as the game starts, press Reset to 
enter the monitor. 

9) As mentioned previously, the RESET vector 
at $3F2 and S3F3 holds the program start 
address. You should find $4000 there. 
However, the program code starts at $19FD, 
where a JMP $404)0 occurs. The hi-res page 1 




(locations S2000 to $4000) is the action screen. 
It is assumed that the code ends at $9600. where 
the DOS buffers start. 

1U) The original disk check routine starts at 
$9434, You can suspect that from the access 
at the RWTS parameter list ($R7E8-5B7F8) dim 
follows. You must disable this roulinc by 
placing an RTS ($60) a! its start. 

9434:6(1 

1 1) In order to defeat the game restart when 
pressing Reset, we must modify the Reset fix 
routine, which lies ai $4069-$4075. 

466A:B3 
4H6F:EH 

This will return you to Applesoft whenever 

Reset is pressed. 

12) In order to save the (new improved) game, 
you must first boot your 48K slave disk. Insert 
(lie slave and type 

C60BG 

You can now save Cubit as one binary file 
by typing: 

BSAVE CUBlT,AS19FD,I.$7C(t3 

However, since this method involves [he 
unnecessary saving of the action screen, you 
can try the following alternative: 
BSAVE CUB1T1.A$1A00.L$600 
BSAVE C1IB(T2,A$4000,L$5G00 

In this case, you must also write the following 
Applesoft program: 

10 PRINT CHRJ(4)"BL0AD CUBIT1" 

20 PRINT CrlR$(4)"BRUN CUBIT2 nl 

Save this file as CUBIT LOADER (or HELLO) 

and RUN it in order to load Cubit. This method 

saves you 29 disk sectors. 

13) You are now done. One final APT: the 
memory location $4097 holds the number of 
Cubits (3 on the original). You can change this 
to a higher numher. 

s 
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Requirements: 

64K Apple ][ Plus. //c, (fc 

DOS 3.3 or compatible 

Super IOB 1.5 or a sector copier 

A sector editor 

Blank disks 

Pixii, Take I , or Prince 

Baudville Software is among the best for 
creating graphic images, animating them, and 
printing them out in color to your printer. In 
this article, you will learn how to deprotcct 
three of their most popular programs: Pixit, 
Take 1, and Prince. Furthermore, the softkey 
will be done in order of age of the programs, 
so that you can see how Baudville's protection 
schemes have evolved. 

Rxit 

Pixit is one of the oldest Baudville programs. 
This program allows you to create and 
manipulate shapes, which can be used in Take 
1 or your own programs. It includes an 
excellent graphic editor with a wide assortment 
of various "prc-made" shapes, which can be 
further supplemented by purchasing their shape 
library disk or designing your own. If you boot 
up Pixit you will hear your drive arm make a 
series of rapid clicking noises, as if it were 
reading the tracks of the disk at a very high rate 
of speed, II is actually checking to see that all 
35 tracks on the disk are perfectly in sync with 
track zero. You could get a working copy by 
using one of the popular bil copiers and copying 
tracks $0-$22 using the "synchronize tracks'' 
option. 
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Fortunately, Baudville has left a big hole in 
its protection scheme, enabling the disk to be 
cracked rather easily. If you CATALOG the 
original disk, you will notice that everything 
is in FIDablc form. These tiles do not check- 
to see if the Baudville DOS is resident, therefore 
you can simply throw away the Baudville DOS 
and substitute your own! 

Here's how; 

1) First make a copy of your original Pixit by 
using COPYA or any other whole disk copier. 

2) Boot up a normal DOS 3.3 disk. Remove 
this disk and put a blank in the drive. 

3) Clear the memory by typing NEW. 

4) Initialize the blank disk with the file name 
"MENU". 

INIT MENU 

5) Use the following Super TOR 1 .5 controllei 
to copy tracks 0-2 of the blank disk that you 
just initialized to the copy you made of Pixit. 
Do not format the copy. 

1000 REM PIXIT CONTROLLER 

1010TK = 0:LT = 3 : ST = 1 5 :L5= 15 .CD = WR TAST 

= 1 
1020 GOSUB 490 : GOSUB 610 
1030 60SUB 490 . GOSUB 610 

THEN 1050 
1040 TK = PEEK (TRK) ST = PEEK <SCT) 
1050 HOME : PRINT "DONE" : END 

6) Relax and enjoy. Your copy should boot up 
and run cleanly. If you prefer, you could add 
a fast DOS like Pronto-DOS to make the boot 
even faster. 

Take 1: (take two) 

Take 1 , like Pixit, uses synchronized tracks 
as ils means of copy protection. However, on 
Take I , only tracks through 6 arc 
synchronized. The program does not check the 
rest of the disk. 

In COMPUTIST No. 25, a softkey for Take 
1 was given. Unfortunately, the procedure will 



IF PEEK (TRK) = LI 



GOTO 1020 



p 
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not work on all versions of this animation 
package. Another sector edit on track is 
necessary to produce a working copy . Further 
exploration of the machine code revealed 
another routine that needs to be disabled. 

This is accomplished by substituting two 
$EA"s for the two bytes in a conditional branch 
instruction at track 0, sector 6, byte $2D. Thus, 
lo get a completely unprotected Take 1 , follow 
these steps. 

1) Make a copy of the original Take 1 disk with 
COPY A or other normal disk copier. 

2) Using a sector editor, make the following 
changes to the copy: 

On track 0, sector (6- 



Byte* 


From; 


To; 


$16 


$00 


SEA 


$17 


If! 


SEA 


$2D 


m 


SEA 


S2E 


$D9 


SEA 


On track 0, 


sector $F 




Byte* 


From. 


To. 


$08 


$D0 


5rA 


$09 


$F7 


SEA 



3) You are now the proud possesor of an 
unprotected copy of Take 1 ! 

Prince 

Prince is one of the newest releases from 
Baudville. This utility program allows you to 
transfer your hi-res and double hi-res pictures 
to your printer in color. This is accomplished 
by switching different colored ribbons in the 
printer during the dumping process. Also, if you 
use heat -transferable ink on your printouts, you 
can transfer your color screendump to a T-shirt! 
Prince also lets you make greeting cards and 
labels in color. 

As for its protection. Prince uses 
synchronized tracks in a manner similar to Take 
1. The tracks that are synchronized are 
through 7 with one minor change, on Prince, 
if you take a look at the length of the tracks on 



the disk (many bit copiers display track lengths) 
you will notice that they arc much shorter than 
usual . This will prevent you from crealing a bit 
copy backup with almost all newer bit copiers 
such as Locksmith 5.0 and Copy ][ Plus 5.0. 
However, the folks at Baudville, in designing 
their copy protection, did not consider older bit 
copiers such as Locksmith 4. 1 that, in certain 
instances, tend to lengthen the tracks on the 
duplicate copy. As a consequence Locksmith 
4,1, when told to synchronize tracks 0-7, will 
produce a completely working backup with the 
harmless side effect of having a more normal 
track length on the duplicate. However, 
Locksmith 5.0 and Copy ][ Phis 5.0 (the slick 
new versions) won't even get past the first track! 
The lesson here is not to throw out those old 
bit copiers just because you have the newer 
versions of them! 

To disable the protection routines of Prince, 
we need not look very tar, because they have 
used a RW'l'S very similar to that of Take 1 (it 
lives in the language card). The disk protection 
routine can be found on track 0, sector 6. The 
actual disk access is done by subroutines that 
this protection calls, so it is harder to locate as 
it contains nothing like LDA $C08C,X to point 
direcdy to it. To disable this one, we will NOP 
out the Branch if Not Equal instructions that 
cause it to keep trying until a test is successful . 

1) Make a copy of your original Prince disk 
with COPYA or similar, 

2) Pull out your sector editor and make the 
following changes to your new copy. 



Change track £ 


-, sector 6; 


Byte* 


From: To; 


S14 


$D0 SEA 


$15 


$F7 SEA 


$31 


$D0 SEA 


$32 


SD5 $EA 



X 



I 



T 



3) That's it. You're done. Note that the flip 
side, which contains the demo pictures, is not 
protected and can be copied normally. 

ft 
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Super IOB 



by Ray Darrah 



Requirements: 

Apple |[ Plus, tfe (ft IM 
One DOS 3,3 disk drive 

Throughout COMPUTIST. you will find 
several "Super IOB controllers." These short 
programs are intended to be keyed into a 
program called Super IOB. That i.s. the Super 
IOB program must be modified by adding lines 
(usually lines 1000 - 9W9) to it. The resulting 
modified Supei IOB pmgram can then de protect 
a particular program. 

Since the introduction of Super IOB. 
COMPUTIST has used this flexible program 
to deproteel (or partially deprotcet) dozens of 
commercial programs with far ranging 
protection techniques. In addition. 
COMPUTIST has printed articles designed to 
aid the programmer in his use of Super IOB. 
These include "CKaver" (COMPUTIST No. 
13). a machine language program which helps 
in the merging of the controller with Super IOB. 
"The Controller Writer" (COMPUTIST No, 
16). an Applesoft program which asks the user 
about the disk he is to deproteet and then 
formulates a Super IOB com roller which will 
deproteet (or at least partially deprotcet) that 
program, and "A Tutorial For: Disk Inspection 
And The Use of Super IOB" appearing m 
COMPUTIST No. 17. 

Presented here is the latest version of Super 
IOB (vl ft) All previous controllers printed 
in COMPUTIST will work with this version. 
The only significant difference between this 
version of Super IOB and the version 
preceedine il is the addition of a machine 



language routine thai allows a disk to be copied 
up to 350's. faster. 

Keying in Super IOB 

Use l he procedure outlined on the inside front 
cover of this magazine to key in the Applesoft 
portion of Super IOB and save it with: 

SAVE SUPER IOB 

Next (using the procedure for machine 
language on the inside front cover) key in the 
hexdump and save it with: 

BSAVE IOB.OB.lt). A$3»0,LS AS 

The Function of Super IOB 

Super IOB deprotects disks by using a 
modified RWTS (the subroutine in DOS which 
is responsible for the reading and writing of disk 

sectors) for reading from the protected disk and 
then using a normal RWTS for writing to the 
deprolectcd disk. Because of this. Super IOB 
can only copy disks with sectors that somewhat 
resemble normal DOS sectors, This includes a 
large percentage of commercial software 
eurienlly on the market. 

Before a disk can he deproteciwl by Super 
IOB, the protection scheme must be 
determined. After the protection is discovered. 
a controller is created tor that specific 
protection. 

The following is a discussion ot various 
protection techniques and how Super 10R can 
be used lo Jfjil llitan. 

Altered Marks 

On every disk there are certain marker bytes 
that tell DOS where each sector starts and ends: 
For example, a normal 16-sector disk has the 
bytes D 1 ) AA 96 at the beginning of every 
sector. These marker-bytes are put on the disk 



only once (during initialization) and remain on 
the disk as permanent "milestones." A 
common practice (especially on older releases I 
is to change these markers lo some other value 
such as D5 BB 9fi. A disk with such a change 
would only be eopyable by a bit copier, 

There are four markers for every see tor on 
a disk. They are: start of address, end ol 
address, start of data and end of data. Four 
subroutines in Super IOB modify the RWTS to 
look for markers of your choosing. These 
subroutines allow a normal RWTS to read an 
otherwise unreadable disk. 

Halftracks 

The Apple disk drive is eapable of moving 
its read/ write head to at least 70 di.siinci 

pos 1 1 io n s However, because i I s re ad / w r i U.T i e ad 

is so wide it cannot reliably write data to each 
of these tracks (i.e. positions). Therefore. 
normal DOS only writes data on the even 
positions and calls them the 35 tracks. The odd 
positions have contracted the name of half 
tracks. 

Sometimes a software publisher will put data 
on these so called halftracks which would once 
again render a disk uneopyable except by a hit 
copier A subroutine in Super IOB will move 
the disk head to any position on the disk without 
lening the RWTS know of the move. This 
subroutine can therefore be used to copy disks 
that have data on those tracks between tracks. 

Modified RWTS 

If you are unable Lo determine the protection 
scheme being employed on a particular disk 
there is a eateh all method. This method uses 
the "Swap RWTS at $1900 with SR800" 
routine in Supei IOB and the swap controller 
presented later in this article. 
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The swap controller instructs Super 10 R to 
react the protected disk with a foreign RWTS 

and write to a normal formatted disk with the 
standard RWTS This method will work if the 
protected program has an RWTS at SB8W0 with 

standard entry and exit conditions. 

Complete instruct ions for using this catch all 
method appear utter the swup controller in this 
article. 



The Comprising Subroutines 

Super I OR is little more than a collection of 
Applesoft subroutines. These subroutines arc 
called by the inserted subprogram (the Super 
IOES controller) in a particular sequence to allow 
deprotcetion of a specific disk. Although the 
concept of Super 10B is simple, only by 
understanding the function of the .subroutines 
in Super IOB can an Applesoft programmer 
learn lo create a controller for a specific disk. 
The lollowmg is an explanation of the 

subroutines in Super IOB. During this 

explanation. I recommend that you refer to the 
listing of Super IOB to see how each subroutine 
is accomplished. 



Name: START UP 

Line Number! s); IB - 60 

Entry Condi lions; Not Applicable 

The first tew lines merely identify the program: 
however, line sixty sets HI MEM mid LOMEM 
so thai they fit the memory usage requirements 
(see Memory Map following) It then goes to 
■■CONFIGURATION TIME". 



Name: INITIAL IOB SETUP 

Line Numberts): 88 

Entry Conditions: 
DV= drive to be accessed 
VL= volume of disk to be accessed 
SO= slot lo be accessed 

This subroutine is normally COS LJ Bed via 

TOGGLE READ/WRITH". Its purpose is to 

reset the buffer page and set the drive, slot and 

volume number to the disk to be accessed next. 



Name: R/W SECTOR 

Line Ntimber(s): 180 1 1(1 

Entry Conditions: 
TK = Track to be accessed 
ST= Sector to be accessed 
CD= Command code for the RWTS 

This subroutine is OOSLBed directly from the 
control ler. ll reads or writes ( depend inji upon 
CD) at the specified track and sector. 



Name: MOVE S PHASES 

Line Numbcr(s): 138 - 140 

Entry Conditions. 
SO = Slot of drive to move 
DV= Drive number of drive to move 
PH = Phase number thai the disk head is 

currently over 
S = Number of phases to move 

This routine moves the disk read head Ihe 
number of phases specified by S (one phase 
equals one half-track) and is capable oi" moving 
in either direction up to 128 phases (or 64 
tracks). Care should be taken that PH + S isn't 
greater than 255 or less than <& or an error will 
occur. 



Name: ALTERED ENDING MARKS 

Line Numhcr(s): 178 

Entry Conditions: Proper DATA pointers 

This routine changes the address field and data 

field epilogue markers in the normal RWTS. 

The values to change these in should be 

contained in a DATA statement. Because 
normal DOS only cheeks the first two bytes ol 
these markers, only four values are required. 
The address field is changed first and should 
appear first in the data statement. 



Name; ALTERED ADDRESS MARKS 

Line Number(s): 198 

Entry Conditions: Proper DATA pointers 

This routine modifies the RWTS (via POKE) 
SO that it looks for a differenl sequence of 
address field prologue marks. The decimal 
values of the marks lo look for should be stored 
as the next DATA elements. 



Name: ALTERED DATA MARKS 

Line Numberfs}: 218 

Entry Conditions: Proper DAT' A po inlets 

Same as previous subroutine except for DA IA 

field prologue marks, 



Name: NORMAL IZFR 
Line Numbcr(s): 238 - 250 
Kntry Conditions; None 

This routine restores the values in the RWTS 
subroutine that are changed by any routine in 
Super IOB. This routine should be called jusi 
before writing in order to fix the RWTS so that 
it can access normal DOS disks. 
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Nitme; IGNORE ADDRESS CHECKSUM 

Li ik' Numhci'fji): 270 

Knit) Conditions, nunc 

rtiis fouttrtu modi lies the RWTS subroutine so 
thai ii doesn't examine the c her k sum byte of 
the address field, This routine has been 
incorporated in many controllers 



Name; ALTERED DATA CHECKSUM 

Line Numberls): 29tt 

[intrj C( mi lit ions- Proper DATA pointers 

Tins [limine alters I lit; starting checksum byte 
that the RWTS subroutine will use when 
reading a DATA field . The normal value for 
the RWTS is 0, The value to change ihe 
checksum to should be the next DATA element. 



Name: THE SECTOR EDITOR 

Line Numbers): 31 tt - VIA 

Entry Condi Lions. Propei DATA pointers and 
Elements 

Tl = lowest track, in buffer 

TK = highest track in buffer 

This routine automatically performs' sector edits 
as the copy process goes on, It must be called 
(via GOS1IR) just after reading a range of 
tracks. To indicate how many sector edits arc 

to he performed, von must have a DATA 
element that has the number of sector edits 

followed by the word "CHANGES " For 

example: 

WW DATA 7 CHANGES. 1. 1. .1.4 

would tell the .sector editor that the nest 28 
DATA elements are sector edits. This is 
because each sector edit is defined in four 
DATA elements, The location of the ""x 
CHANGES" element ill the DATA string does 
not matter because the sector editor will search 
it out and use the elements immediately 
following it. 

The format for the four bytes that define a 
sector edit is: TRACK. SECTOR. BYTE. 
CHANGE TO. Each element is decimal and 
should be within the correct ranges since no 
error cheeking is done. 

If you use the "R.'W A Range Quickly" 
routine and you wish to perform some sector 
edits, you must set FAST equal io 1 so thar this 
rouline will be able lo locate the specified sector 
in memorv. 



Name: EXCHANGE RWTS's 

Line Numheris): .160 

Entry Conditions: A RWTS at 51900 

This is the standard swap RWTS's routine. It 
uses a routine in IQB.OBJ0 to exchange the 
KWT5 at 51900 with that which is located at 
$B8(M. the. normal location for mi RWTS. 

If you wish to exchange some other pages 
of memory, you muy tell the machine language 
swap routine (invoked by a CALL 832) what 
to exchange by executing a few POKE's. They 
are as follows: 



POKE 253, starl of first location 
POKE 255, start of second location 
POKE 224, number of pages to exchange (a 
standard RWTS is eight pages long) 

Name: FORMAT DISK 

Line Number's): iSli 410 

Entry Conditions: 
S2- slot of disk to formal 
D2= drive number of disk to format 

This routine formats the target disk. It was 
meant to be used be lore the controller takes hold 
of Super [OB (and is GOSUBed by 

"Configuration Time") but can be called by 
the controller should rhe need arise. 

Name PRINT TRACK & SECTOR § 

Line Number(s): 43t) 

Entry Conditions. 

TK= J he track number to display 
ST The sector number to display 

This is the subroutine that puts the current track 
and sector number at the top of the screen in 
hexadecimal during the softkey operation. It 
should he invoked jus! before reading or Writing 
each sector. 

Name: CENTER MESSAGE 

Line Numberls): 45(1 

Entry Conditions: AS= The message 

This routine prints a message in the center of 
the screen at the current VTAB position. Care 
should be taken that the message to print is not 
longer than 40 characters, If so. an error will 
occur. 

Name: PRINT MESSAGE AND WAIT 

Line Numheris): 470 

Entry Conditions A$= The message 

This routine uses "Center Message" to print 
the intended message at a VTAB of 1 1 and then 
it prints 'PRESS ANY KEY TO 
CONTINUE " It waits for a keypress before 
KETURNmg. 

Name: TOGGLE READ/ WRITE 

Line Number(s): 49# - 530 

Hntry Conditions: CD= current command code 

This routine toggles the state of CD (from ReaD 
to WRite and vice versa) and prims the current 
mode in flashing letters at the very top of the 
screen, In addition, if the user has only one 
drive, it asks him to swap disks. It then exits 
via "INITIAL IOB SETUP," thus making the 
sector huffer ready for the next operation. 

Name IGNORE UNREADABLE SECTORS 

Line Number(s): 550 - 590 
Entry Conditions Not Applicable 

The controller should pay no attention to 
unreadable sectors, then somewhere in the 
beginning of it should be an "ONERR GOTO 
550," This is used usually with RWTS. 1 3 
(since DOS 3.2 sectors are unreadable until they 
have been written to) bin can be used with anv 



disk that has unreadable sectors which should 
be ignored, 

Now I luil this rt inline will not fiuii'tiifti 
tW-t'giih' if \t>i< tin- Uff/ffg "R.'W A Rtin^c 
Quickly". Tl) ignore errors when ttxiftg this 
routine, nmm n POk'F 775.96 hm> ihv 
bi'iii nnin^ of your ami roller. 

Name R/W A RANGE 

Line Number(s): 610 - 620 

Entry Conditions. 
IK,ST= first sector to read or write 
I T.f.S last sector (minus one MOD 16) lo 

read or write 
MR— maximum buffer page, CD = 

command code 

This routine quickly reads or writes a range of 
sectors bv calling a machine language program. 
To be faster, this machine language program 
stores the sectors In memory in a decreasing 

manner That is: sector S0F is followed by 

sector $0E and sector SKID and so on. 

Storing the sectors in memory in a different 
sequence than ascending is O.K. as long as. 1 1 
the sectors are written in the same order they 
are read, and 2) "The Sector Editor" routine 
knows that the sectors were stored in 
descending order by selling the variable PAST 
equal to I . 



The Remainder Of The Program 

Lines 1000 ih rough 9999 are mean! for the 
controller and all DATA statements it contains. 
All lines greater than 9999 are used by the error 
trapper or the configurer which consists of all 
the prompts when the program is ran. The error 
trapper will print a disk error and stop the 
program, If the error wasn't a disk error, the 
error trapper will let it occur. 

Now that you have an idea of the subroutines. 
lake a look at the Variable Usage I ist on page 
21 and note how the variables relate to them. 

Memory LI sage 

Following is a memory allocation table for 
the various parts ol Super IOB, It is extremely 
important to stay within the boundaries when 
writing a controller, If not. horrible things may 
happen (the least of which would be the 
produeiion of an incorrect copy), 



Memory Allocation Table 

$«Sftft.$18FF . . (2048 6.199) 

intended for the Applesoft part of Super IOB 

$I9flA.$2AFF (6400-8447) 

space allocated for a moved RWTS. 

$2I00.S26FE (S44S-9983) 

Super [OB Applesoft variable space 

!S2700.$96EE (9984-.1R655) 

enough space for 7 tracks, this is Ihe sector 
buffer 



First, notice the amount of space available 
for the BASIC program. This leaves ample 
room for most any cunt roller. 
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Second, libsfirvc [ho 1534 bytes for variables. 
This should he enough space tor the simple 
sort key procedure, ll is impossible to allocate 
more memory for variables and use an alternate 
RWTS tile. If you find that you need more 
memory and the program does not use 
RWTS. 13 or some other moved RWTS, lite 
LOME Mr S448 command may be removed 
from tine 60 This will alloeate what isn't used 
(by the BASIC program) of the 2K area 
reserved for ihc relocated RWTS us variable 
space. 

Never omit the "HIMEM." statement! 

This could cause variables to overflow into 
the sector buffer, thus making a faulty copy, 

Willi all ihis new knowledge, we are finally 
ready 10 scrutinize some sample controller 
programs. Keep in mind that protection 
schemes can he used with one another 
Therefore, a more sophisticated controller for 
Super IOB will probably be required for most 
softkeys. Even so, developing new controllers 
isn't difficult. 

The Standard Controller 

LISTed below is, the standard controller, Ihis 
controller (when merged into Super IOB v 1 .5) 
can only copy normal DOS 3J disks. It is 
essential that you key this controller in and save 
it. as most controllers appearing in 
COMPUTIST are only modified versions of 
this controller. 



fast controller 

1000 REM FAST CONTROLLER 

1010TK = LT = 3S ;ST=15 :LS = 15 : CD - WR : FAST 

= I 
1020 GOSLIB 493 GOSUB 610 
1030 GOSUB 490 GOSUB 610 I F PEEK (TRK ) = LT 

THEN 1050 
1040TK = PEEK(TRK) ;ST = PCEK (SCT) : GOTO10Z0 
1050 HOME PRINT "COPYDONE" END 

Line Explanation 

Iftftft - identifies the controller 

1810 - initializes variables: TK= 0. ST= 15 
- sets the starting sector to be copied at 
track 0, sector 15, LT= 35, LS = l5-sets 
the last secior 10 be copied at track 34, 
sector IS. CD= WR - sets the command 
code to to write. FAST= 1 - lells the 
sector editor subroutine that the sectors are 
stored in memory in a decreasing order. 

1*28 - the read routine: begin by toggling 
read/ write to read, read a chunk of sectors 

103ft - the write routine: begin by toggling 
read/ write lo write, wrile a chunk of 
sectors, if last track was written, then go 
to exit routine. 

Jft4t> - update track and sector number for next 
read and go lo read routine 

1858 - the exit routine: clear the screen, print 
ending message and exit to Applesoft 

The Swap Controller 

This controller reads with one RWTS and 
writes with the normal RWTS. This controller 



* 

* 


■ 


Super IOB 




machine routines * 


% - 

03D9 




BY RAY DARRAH * 


- RWTS.B800 


.EQ $03D9 ENTRY POINT TO RWTS &JB800 


D412 


- INVOKERROR EQ SD41? ROUTINE THAT CASES BASIC TO DO THE ERROR CONTAINED IN X 


1E00 


- RWTS. 1900 


.EQ J1E00 ENTRY POINT TO THE RWIS AT 11900 


B9A0 


- SEEKABS 


EQ SB9A0 ENTRY POINT TO THE SEEKABS ROUTINE AT JB800 


DE- 


BAS ERR 


.EQ 222 BASIC ON 


ERR ERROR CODE 


FC- 


SWFRM 


EQ SFC EXCHANGE 


FROM PARAMTFR 


FE- 


SWTO 


.EQ SFE EXCHANGF 


RWTS 'TO' PARAMETER 


E0- 


PAGES 


FQ SES NUMBER OF PAGES OF MEMORY 10 EXCHANGE 


2A- 


CH 


.EQ S24 CURSOR X POSITION 


FDDA 


PRNTBYTE 


EQ SFDDA PRINTS HEXADECIMAL BYTE 
OR 50300 STARTS AT PAGE THREE 






TF IOB.OBJ0 


... -i't 


CALL RWTS 9 


0300 


A9 03 


10 LDA /TABLETYP ENTRY POINT TO THE RWTS THROUGH BASIC 


0302 


A0 0A 


LDY tfTABLETYP AY POINT TO THE IOB TABLE 


0304 


20 D9 03 


JSR RWTS BS00 GO TO THE RWTS AT $B800 


0307 


B0 16 


BCS DOS. ERR 


IF THE CARRY SET THFN CAUSE BASIC ERROR 


0309 


60 


RTS 


OTHERWISE. ALL IS WELL SO RETURN 


030A 


01 


TABLETYP .HS 01 


TYPE OF TABLE (UIOB) 


030B 


60 


SLT .HS60 


SLOT TO BE ACCESSED NEXT (VIA POKESLT.SQ) 


030C 


01 


DRV .HS 01 


DRIVE TO BE ACCESSED NEXT (1 OR 2) 


030D 


00 


VOL .HS 00 


VLUME TO BE ACESSED (0-ANYTHING WILL DO} 


030E 


00 


TRK .HE 00 


TRACK TO ACCESS 


030F 


00 


SCI .HS 00 


SECTOR TO ACCESS 


0310 


IB 03 


DCTPTR .DA DCT 


POlNTFR TO THE DEVICE CHARACTERISTICS TABLE 


0312 


30 


BUFFERLO .HS 00 


ALWAYS MAKE LSB OF BUFFER POINTER ZERO 1 


0313 


27 


BUF .HS 27 


SECTOR BUFFER PAGE POINTER 


0314 


00 


NOTHING ,HS 00 


NOT USED 


0315 


00 


BYTCOUNT .HS 00 


BYTE COUNT FOR PARTIAL SECTOR (0=256 BYTES) 


0316 


00 


CMD .HS 00 


COMMAND CODF (0=SEEK) 


0317 


00 


RWTS. ERR HS 00 


ERROR CODE THA THE RWTS 8800 RETURNS WITH 


0318 


00 


OVL HS 00 


VOLUME NUMBER OF LAST ACCESSED DISK 


0319 


60 


OLDSLT HS 60 


SLOT PREVIOUSLY ACCESSED 


03IA 


01 


OLDDRV HS 01 


DRIVE PREVIOULSY ACCESSED 


031B 


00 


DCT HS 00 


DEVICE TYPE OF DFVICF CHARACTERISTICS TABLE 


031C 


01 


PHASES HS 01 


PHASES- 1 PFR TRACK. (S OR 1) 


031D 


EF D8 


M0T0RCNT HS EFDfi 


MOTOR-ON TIME COUNT 


031F 


AD 17 03 


DOS FRR LDA RWTS ERR 


DOS HAS HAD AN ERROR. GET THE ERROR CODE 


0322 


4A 


LSR 


DIVIDE IT BY 16 


0323 


4A 


LSR 




0324 


4A 


LSR 




0325 


4A 


LSR 


TRANSFER iT TO X SO BASIC WILL ERROR 


0326 


AA 


TAX 


0327 


4C 12 D4 


JMP INVOKERROR CAUSE A BASIC ERROR 


MOVE THE DISK ARM * 


03 2A 


A9 00 


MOVPHASES LDA SJ00 


SET UP THE REGISTERS BEFORE CALLING SEEKABS 


032C 


A2 00 


LDX wS00 


X AND A HAVE DUMMY NUMBERS THAT WILL BE POKE 
D INTO BY "MOVE S PHASES" 


032E 
* __ 

0331 


4C A0 B9 


JMP SEEKABS 






CAUSE ERROR IN CONTROLLER * 


A6 DE 


BASlCcRR LDX BAS. ERR 


CAUSE THE ERROR s AT 212 


0333 


4C 12 D4 


JMP INVOKERROR 
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POP 


OFF RtlUHN * 


0336 


66 




POP 


PLA ROUTiNF 


TO POP OFF ONE RETURN (BASIC) ADDRESS 


0337 


A& 






TAY 




0338 


68 






PLA 




0339 


A6 DF 






LQX BAS.ERR+1 


FIX STACK 


033B 


9A 






TXS 


PUT THAT AS THE STACK POINTER 


033C 


48 






PHA 




033D 


98 






TYA 


RESTORE THE LAST RETURN ADDRESS 


033E 


43 






PHA 




033F 


60 






its 




Us 








EXCHANGE RWTS's * 


0340 


A0 00 






ldy m 


ZERO THE LSB's 


0342 


84 FC 






STY SWFRN' 


AND HAVE Y AT ZERO FOR START 


0344 


84 FE 






STY SNTO 




0346 


Bl FC 




MOVF PAGF 


Y GET A BYTE 


0348 


48 






PHA 


AND SAVF IT 


0349 


Bl FE 






LOA (SiVTO) Y 


GET THE BYTE WHERE THF SAVED ONF GOFS 


034B 


91 FC 






STA (SWFRM).Y 


AND STORE IT WHERE THE SAVED ONE WAS 


034D 


62 






PLA 


GET THE SAVED BYTE 


034E 


91 FE 






STA (SNTO) . Y 


AND STORE IT WHERE IT GOES 


0350 


C8 






INY 


DONE WITH A PAGE 


0351 


D0 F3 






BNE HOVE. PAGE 


NO KEEP WORKING ON IT 


0353 


E6 FD 






1 NC SWFRM i 1 


GET NEXT MSB's 


0355 


t6 FF 






INC SVi'TO+1 




0357 


CS»E0 






DEC PAGES 


DECREMENT THE NUMBER OF PAGES TO MOVE 


0359 


D0 EB 






BNE MOVE. PAGE 


IF NOT DONE. MOVE AN01HER PAGE 


035B 


60 




RTS1 


RTS 
READ OR WRIT 


FINISHED. RTS 


E THE ENTIRE BUFFER * 


035C 


97 




MB 


HS 97 


HIGHEST BUFFER PAGE+1 


035D 


35 




_T 


HS 35 


LAST TRACK TO GET41 


035E 


0F 




LS 


HS 0F 


(LAST SECTOR TO GET-l)MOD16 


035F 


A9 00 






lda m 


DO A VIAB3 


0361 


85 28 






STA $28 




0363 


A9 05 






LDA « 5 




0365 


85 29 






STA $29 




0367 


A9 10 




NEWTRK 


LDA f!6 


HTAB 


0369 


85 24 






STA CH 




036B 


AD 0E 


33 




LDA TRK 




036E 


20 DA 


F0 




JSR PRlvTBYTE 


PRINT IT 


S371 


A9 1C 






LDA *28 


HTAB 


0373 


3D 24 






STA CH 




0375 


AD 0F 


03 




LDA SCT 




037& 


20 DA 


-J 




JSR PRNTBYTE 




037B 


20 00 


G3 




JSR 10 


GET A SECTOR 


03 7 E 


: CE 0F 


03 




DEC SCT 


NEXT SECTOR 


0381 


10 08 






BPL tfXT PG 




0383 


. A9 0F 






LDA S15 


RfSTORF TO SFCTOR 15 


0385 


. 3D 0F 


03 




STA SCT 




0388 


: EE 0E 


03 




INC TRK 


NEXT TRK 


038B 


: EE 13 


n 


NXT PG 


INC BUF 


NEXT PAGE OF MEMORY 


038E 


: AD 13 03 




LDA BUF 




0391 


: CO 5C 


03 




CMP MB 




0394 


B0 C5 






BCS RTS1 


BUFFER FULL. RETURN 


0396 


. AD 0F 


03 




LDA SCT 


LAST SECTOR? 


0399 


CD S£ 03 




CMP LS 




039C 


: D0 C9 






BNt NEWTRK 




039E 


■ AD 0E 


ej 




LDA TRK 




03A1 


CD 5D 


03 




CMP LT 




03A4 


90 CI 






BCC NFWTRK 




03A6 


. B0 B3 






BCS RTS1 


END OF DISK 



is very Jiandy an J used b\ 
COMPUTIST frequently 



Hardcore 



swap controller 



1000 REM NEW SWAP CONTROLLER 

10L0TK=0:LT = 35:ST = 15 :LS = 15 :CD = WR C AST 

- 1 
1020 GOSUB 360 . GOSUB 490 . GOSUB 610 
1030GOSUB360 GOSUB 490 GOSUB610 : IF PEEK 

(TRK ) -LT THEN 1050 
1040 TK = PEEK (TRK'; ■ ST = PEEK {SCT ) GOTO 1020 
1050 HOME PRIN1 "COPVDONE" . END 
10010PRINTCHRS(4) "BLOAD*Ri'vTS.XXX.AS1900" 

I'd use this L'QntroIlcr, you nmM first bom 
up your protected disk, pop into the monitor 
and move its RW'l'S into a sale area of memory 
by typing; 

l90e<B80».BFFFiYl 

Next, you must boot up a normal DOS .*,.* disk 
(preferably your Super IOB disk) and save, tftis 
relocated RWTS 

nSAVF RWTS. XXX. \$19»a,L$8»» 

1 1 is rccommc tided that you ehartge the 
filename from "XXX" 10 that at the program 
you are trying to deprotect. You will then Have 

t&chaage the "XXX" in line l TO 10 or" the swap 
eomrollei to whatever you change the "XXX" 
to in the above command. 

The last step in using die swap eoiilioller is 
to merge it with the Super IOB vt ,5 bodv and 
RUN it 

Saving the Controller 

Ii is recommended that you have copies of 
both of these controllers The best method of 
controller manipulation (typing in saving, 
merging wiih Supei IOB etc.) is through the use 
of "CSaver" which appeared in COMPUTIST 
No. 13. 

Now go out there and break some disks! 



a 





Super IOB Hexdump 


0300" 


A9 03 A0 0A 20 D9 03 B0 


&BD36 


0308: 


16 60 01 60 01 00 00 00 


S9CF5 


0310. 


IB 03 00 11 m 00 00 00 


$4320 


0318: 


00 60 01 00 01 EF D8 AD 


S55A7 


0320: 


17 03 4A 4A 4A 4A AA 4C 


SB42B 


0328: 


1? U A9 00 A2 00 4C A0 


S8038 


0330: 


B9 A6 DE 4C 12 04 68 AS 


S6E1C. 


0338: 


68 A6 DF 9A 48 98 48 60 


SFDD9 


0340: 


A0 00 84 FC 84 FE Bl FC 


53777 


0348: 


48 El FE 91 FC 68 91 FE 


SAABS 


0350: 


CS D0 F3 E6 FD E6 FF C6 


S921F 


0358: 


E0 D0 fc-B 60 9/ 36 0F A9 


55F1E 


0360: 


00 85 28 A9 05 35 29 A9 


I8FFA 


0368: 


10 85 24 AD 0E 03 20 DA 


J41EA 


0370: 


FD A9 1C 85 24 AD 0F 03 


SB401 


0378 


20 DA FD 20 00 03 CE 0F 


£01 IB 


0380. 


03 10 08 A9 0F 8D 0F 03 


S3519 


0388. 


EE 0E 03 EE 13 03 AD 13 


S387C 


0390: 


03 CD 5C 03 B0 C5 AD 0F 


StFCA 


0398: 


03 CD 5E 03 00 C9 AD 0E 


518A0 



03A0: 03 CD 5D 03 90 CI B0 B3 5250A 



20 



COMPUTIST No. 32 



Super IOB Variables 



A — General temporary usage, scrambled by 
"Move S Phases" and "The Sector 

Editor." 

A$ —holds message to pass to the user via 
"Center Message" arid "Print Message 
And Wail" and is scrambled by "Toggle 

Read/Write, ' 

Ali A2, A3, A4 — scrambled by "Allered 
Address Marks", "Altered Data Marks". 
"The Sector Editor", "Allered Ending 
Marks" and "Allered Data Checksum" 
these are READ from DATA statements and 
POKEd into the appropriate RWTS to 
change it. 



BS altered only by 
Time." 



'Configu ration 



BF —Buffer Full holds the status of the 
sector buffer and is set to 1 if the buffer is 
either full or empty and if neither. Is 
changed only by "R/W SECTOR." 

BUF BUFfer constant holds the address 
where the RWTS is expecting to find the 
page number of the sector and is used by 
"Initial IOB Setup" and "R/W Sector". A 
PEEK(BUF) will return the current sector 
buffer page number. 

CD — CommanD code is used by the 
controller, "Toggle Read/ Write" and 
"R/W Sector" and holds the current RWTS 
command code (see RD. WR, and INIT). 

CMD -CoMmanD code constant holds the 
address where the RWTS is expecting 10 
find the previously stated command code 
and is used by "R/W Sector", A POKE 
CMD, CD will change the IOB command. 

Dl —Drive 1. set during configuration to 

the drive number of the source drive, is used 
by "Toggle Read/Write." 

D2 — Drive 2, same as above except for 
target drive. 

DOS —Disk Operating System specifics the 
number of sectors to read or write and is 
initialized to 16. 

DRV — DRtVe constant holds the address 
where the RWTS is expecting to find the 
drive number of the drive to be accessed and 
is used by "Initial IOB Setup", A 
PEEK(DRV) will return the drive last 
accessed. 



DV —current DriVe, used by "Initial IOB 
Setup", "Toggle Read/Write", and "Move 
S Phases", holds the drive number of the 
drive to be accessed next 

ERR — ERRor code is used by "Disk 
Error" to determine the error that has just 
occurred, 

FAST —used by "The Sector Editor" to 
calculate the correct addresses of specified 
sectors if set to 0, The "The Sector Editor" 
then assumes that all sectors are stored in 
consecutive memory pages in an ascending 
order. If set to a 1. "The Sector Editor" 
routine assumes that the sectors are stored 
in a decreasing order (see the section 
describing the operation of "R/W A Range 
of Sectors"). 

INIT INTTialize command code. A 
CD = IN IT will set the command code to 
format the diskette. 

IO — Input/Output constant holds a 768 (set 
during configuration) and is CALLed hy 
"R/W Sector" to induce the RWTS 

subroutine. 

LS Last Sector number is used to tell 
"R/W A Range Quickly" what sector is the 
last sector to be read. 

LT — LasL Track number is used to tell 
"R/W A Range Quickly" the last track to 
be read or written. 

MB —Maximum Buffer page holds the last 
page of memory for the sector buffer, is 
used by "R/W Sector", is initialized (during 
configuration) to 1 5 1 and should be changed 
Lo 130 only when a 13-seclor disk is read 
or written. 

OVL —Old VoLtime constant. A 
PEEK(OVL) will return rhc volume number 
of the previously accessed diskette. 

PH -current PHase. If "MOVE S 
PHASES" is referenced (by the controller). 

this variable must contain the disk arms 
current phase number (PH=2*TK), 

KD — ReaD command code. A CD=RD 
will set the command to read the disk. 

S —Step is used to tell 1 'Move S Phases" 
how many phases to step through (-120 to 
120). 



SI — Slot 1 means to set to the slot number 
of the source drive during configuration and 
is used by "Toggle Read/Write". 



S2 —Slot 2. Same as above except for target 
drive. 



SCT — SeCTor number constant holds the address 
where the RWTS is expecting to find the sector 
to be accessed and is used by "R/W S" to toll 
the RWTS which sector is to he read or written. 
A PEEK(SCT) will return the last accessed sector 
number. 

SLT — SLoT number constant holds the address 
where the RWTS is expecting to find the slot 
number of the disk lo be accessed next and is used 
by "Initial IOB Senip". A PEEK(SLT) will return 
the last accessed disk slot number, 

SO — SlOt number is used hy "Toggle 
Read /Write" and "Initial IOB Setup" and holds 
ihe slot number of the disk to he accessed next. 

ST — SccTor number is used by the controller to 
tell "R/W Sector" which sector number is to be 
read or written next and is also used lo tell "R'W 
A Range Quickly" the starting sector to he read 
or written. 

TK — TracK number is used by the controller to 
tell "R/W Sector" which track is to be accessed 
next and is also used to tell "R'W A Range 
Quickly" the starting track to read or write. 

TRK — TRacK number constant holds the 
memory location where the RWTS is expecting 
to find the track to he accessed. A PEEK(TRK) 

will return the last accessed track number. 

VL — VoEume number is used by the controller 
to tell "Toggle Read/ Write" (which passes it to 
''Initial 10R Setup") the volume number of the 
disk lo be accessed next. 

VL$ —altered only by "Format Disk" 

VOL — VOLume number constant holds the 
memory location where the RWTS is expecting 

lu find the volume lo be accessed. A PEEK(VOL) 
will reuirn the volume number .last used hy the 
controller. 

WR -WRite command code. A C.D = WR will 
set ihe command to write. 
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Super IOB v1.5 BASIC Program 



Z0 REM ' SUPER IOB 1 5 
33 REM ^ BY RAY DARRAH 

43 REM : -' : - ■ '■ ■ ■' ■ 

50 REM SET H I HEM BELOW BUFFER AND SET LOMEM ABOVE 

THE B LOADED RWTS 
60 LOMEH: 8448 : HI MEM-. 9983 . GOTO 10010 
70 REM INITIAL IOB SETUP 
80 POKt BUF 39 : POKt DRV . DV : POKE VOL ,VL , 

POKESLT .SO * 16 : RETURN 
90REMR/W SECTOR 
100eF = 3 . ROKETRK TK POKESCT ST . POKE CMD 

CD : CALL iO POKE BUF . PEEK (BUF ) * 1 : 

IFPEEK(BUF) > MB THEN BF = 1 
H0 RETURN 

120 REM MOVE S PHASES 
130 POKE 49289 * SO * 16 + DV : POKE 49289 

+ S.O* 16 .0 .A- PH- INT (PH/4 ) * 4 

■ POKE 1144 128 + A . P0KESI1 . 128-S-A 
POKE313 SO =:= 16 CALL 810 POKE 49288" 

-SO * 16 PH = PH i S IF PH <0THEN 

PH = 
143 RETURN 

L50 REM 16 SECTOR RWTS ALTFRATIONS 
160 REM ALTERED ENDING MARKS 
170 READ Al A2 .A3 ,A4 . POKE 47505 ,A1 POKE 

47515 ,A2 : POKE 47413 .A3 P0KE47423 ,A4 

■ RETURN 

180 REM ALTERED ADDRESS MARKS 

190READA1 A2 A3 . POKE 47445 .AI . POKE 47455 

,A2 . POKE 47466 .A3 : RETURN 
200 REM ALTERED DATA MARKS 
210READA1 A2 A3 POKE47335 A1POKF47345 

A2 . POKE 47356 .A3 . RETURN 
220 REM NORMAL I ZER 
230 POKE 47505 ,222 . POKE 47515 .170 . POKE 

47413 222 : POKE 47423 .170 
240 POKE 47445 .213 POKE 47455 170 POKE 

47466 .150 . POKE 47335 .213 
250 POKE 47345 .170 : POKE 47356 .173 . POKE 

47360 ,0 ■ POKE 47498 ,163 RETURN 
260 REM IGNORE ADDRESS CHECKSUM 
2/0POKE47498 J RETURN 
280 REM ALTERED DATA CHECKSUM 
i% RFAD Al ■ POKE 47360 . Al : RETURN 
300 REM THE SECTOR EDITOR 
3 10 READ AS: I FRIGHTS (AS ,7 ) <> "CHANGES' 1 THEN 

310 
320 FOR A = 1 TO VAL (AS ) ' READ Al ,A2 A3 ,A4 
330 IFA1 <T10RA1 > TK THEN NEXT RETURN 
340 POKE 9984 4 (Al- 11 ) * 4096 + ABS (FAST * 

15-A2 ) * 256 + A3 ,A4 : NEXT : RETURN 
3-50 REM SWAP RWTS AT $ 1900 W I TH THE ONE AT SB800 
360 POKE 253 .25 . POKE 255 .184 . POKE 224 .8 . 

CALL 832 ■ RETURN 
370 REM FORMAT DISK 
380 AS = "VOLUME" NUMBER' FOR* COPY* =>254" : 

HOME : GOSUB 450 : HTAB32 : INPUT"" :VL$ 
VL = VAL (VLI ) : IF VLS = "" THEN YL = 254 
393 I T VL > 255 OR VL < 9 THEN 380 
400POKECMD INIT 50 = 52 "DV = D2 ^4= "INSERT* 

BLANK' DISK" IN" SLOT 4 " t STRt (S2) +" *■ 

DRIVE" " + STRI (D2 ) : GOSUB 470 
410GOSUB 80 HOME :A$ "FORMATTING" : FLASH 

■ GOSUB 450 ■ NORMAL : CALL 10 :VL = . 
RETURN 

420 REM PRINT TRACK S SECTOR* 



POKE 861 IT . 

POKESCT ,ST : 
1002 . RETURN 



507 THEN 



430VTAB3 . HTAB10 . PRI NT "TRACK 4 S" M IDS (HXS 
TK * 2 + 1 2 1 "** SECTOR'S" Ml DS (HXS 

.ST * 2 + 1 .2 ) "*" " : RETURN 
440 REM CENTER MESSAGE 

450HTAB21 - LEN (AS) /2 . PRINT AS. . RETURN 
463 REM PRINT MESSAGE AND WAIT 
470 HOME VTAB 11 GOSUB 450 . VTAB 13 .Al = 

"PRESS" ANY" KEY"TO° CONTINUE" : GOSUB 450 
WAIT- 16384 .128 : GET AS : RETURN 
480 REM TOGGLE READ/WRiTE 
490CD=(CD=1) + 1 . I F CO = RD THEN A$ = " INSERT" 

SOURCE 11 DISK " : SO = S 1 :DV = D1 : GOTO510 
500 AS = " I NSERT* TARGET" D I SK . " : SO - S2 . DV - D2 
510 I F Dl = D2 AND SI = S2 THEN GOSUB 470 . HOME 
520 VTAB 1 HTAB1 PRINTSPC(39) FLASH -AS 

= "READING" , I FCD = WRTHENAS = "WRITING" 
530 GOSUB 450 ; NORMAL : GQ1O80 
540REMONERR IGNORE UNREADABLE SECTORS 
550 CALL 822 ERR=PFFK (222 ) 
560IFERR = 255ORERR = 254ORCD<>RDTHEN10230 
570 I F ERR > 15 THEN POKE 216 .0 . RESUME 
580 PR I NT CHRS (7): : POKt BUF PEEK (BUF ) + 1 

; I T PEEK (BUF ) - > MB THEN BF , 1 
590 RETURN 

600REMR/W A RANGE QUICKLY 
610 PR* . mil POKE 860 .MB 

POKE 862 . LS 
620 POKE CMD .CD : POKE TRK .TK 

GOSUB 430 : CALL 863 . CALL 
10000 REM CONFIGURATION TIME 
10010 REM BLOAD RWTS HERE 
10020 IF PEEK (768} * PEEK (769 ) 

10060 
10030 HOME AS = "» "SUPER" IOB"*" : GOSUB 450 

■ PRINT ■ PRINT -hi = "CREATED* BY" RAY* 
DARRAH" GOSUB 450 

10040 VTAB 10 :AS = " INSERT" SUPER" IOB" DISK" 
: GOSUB 450 . PRINT : PRIN1 PRINT ;A5 = 
"PRESS" ANY" KEY' TO" CONTINUE" 

■ WAIT- 16384 128 : GET AS 
10050 PRINT : PRINT CHRS (4 

IOB.OBJ0.A5300" 
10060TK=ST = VL = CD = DV = 5O:RD = 1 :WR = 2 : INIT 

= 4 : ONERR GOTO 10220 
10070 10 = 768 :SLT = 779 : DRV = 780 :VOL = 781 

TRK = 782 SCT = 783 BUF = 787 CMO = 790 

,0YL = 792 
10080 HOME :DOS = 16 .MB = 151 :HXS = 

■'000102030405060708090A0B0C0D0E0F101 

112131415161718191A1B1C1D1E1F202122" 
10090 VTAB 8 PRINT 'AS = "ORIGINAL" :S2 = 6 02 

= 1 . GOSUB 10140 :S1 = S2 :D1 = D2 
10100 PR I NT. PR I NT. PRINT :D2 = (D2 = 1 } + 1 .AS 

= '■DUPLICATE 1 ' : GOSUB 10140 
10110 AS = "FORMAT" BACK" UP" FIRST?" N" f CHRS 

(8 ) HOMF ■ VTAB 12 : GOSUB 450 : GET AS : 

IF AS = "Y" THEN GOSUB 380 
10120 HOME :AS = "INSERT" DISKS" IN* PROPER" 

DRIVES. " GOSUB 470 : HOME : GOTO 1000 
10130 REM GET SLOT AND DRIVES 
10140 GOSUB 450 PRINT : PRINT . PRINT TAB{ 10 

) "SLOT=>" S2SPC( 8 ) "DRIVE=>" D2: 
10150 HTAB 16 B$>"7" GOSUB 10180 S2 = VAL 

(AS) 
10160 HTAB 32 B$ = "2" . GOSUB 10180 :D2 = VAL 

(AS ) : RETURN 
10170 REM GET A KEY 
10180 GET AS ■ IF W< "1" OR AS ^ BS ) AND AS < 

>CHRS (13 ) THEN 10180 



GOSUB 450 



) "BLOAD" 



10190 I F AS = CHRS ( i3 ) THEN AS = CHRS ( PEEK ( 

PEEK (40) *PEEK (41 ) » 256 f PEEK (36 ) 

)-128) 
10200 PRINT AS. . RETURN 
10210 REM DISK ERROR 
10220 ERR = PEEK (222) : I F ERR > J 

THEN POKE 216 CALLS22 
10230 IF ERR - 254 THEN PRINT 

PLFASF " PRINT RESUME 
10240 IF ERR = 255 THEN STOP 
10250 IF tRR = THEN AS = "INI I 

ERROR" 
10260 I F ERR = 1 THEN AS = "WRITE" PROTECTED" 
10270 IF ERR = 2 THEN AS = "VOLUME* MISMATCH" 

ERROR" 
10280 IF ERR -4 THEN AS = "DRiVt" tRROR" 
10290 I F ERR = 8 THEN AS = "READ" ERROR" 
10300 VTAB 12 GOSUB450 PRI NT CHRS (7 )■ END 



15ANDERR<:254 

RESUME 
"TYPE* AGAIN" 



lALIZAHON" 



Si 


iper IOB 


checksums 


10 


- IBADD 


480 - 


S88F2 


20 


- S9B13 


490 - 


S58F6 


33 


- S4D3B 


500 - 


S306F 


it! 


- SAD92 


510 - 


S799A 


5G 


■ SC899 


520 


SC998 


50 


- S1FBA 


530 - 


5F2E1 


73 


- 10061 


540 - 


S3215 


iiC 


- SS35F 


550 - 


SB642 


91 


- SF17] 


560 - 


SF18A 


130 


- SAD0E 


570 - 


S65E6 


110 


- S57B6 


580 - 


SBC9F 


120 


- 58472 


590 - 


58F93 


130 


- 5617E 


600 - 


S70D2 


140 


- S0F1F 


610 - 


SF0C1 


150 


- SF1B3 


620 - 


SDAE1 


160 


- SC59A 


10000 - 


S1AA6 


170 


- S24E7 


10010 - 


S69F9 


180 


- S3991 


10020 - 


S5B71 


190 


- S8D19 


10030 - 


5B9FC 


200 


- S87A6 


10040 - 


S5019 


210 


- SF20A 


10050 - 


S3 573 


220 


S7021 


10060 


$4306 


230 


- SB0F4 


10070 - 


S47AE 


240 


- S63A7 


10080 - 


SFDD7 


250 


- S7FFD 


10090 - 


SEBD1 


260 


- S51AB 


10100 - 


S9723 


270 


- SE236 


10110 - 


S93ED 


280 


S2EE2 


10120 


S6332 


290 


- SCBCA 


10130 


S4518 


303 


- 58AE5 


10140 - 


SDAC7 


310 


- S16EC 


10150 ■ 


SD05F 


320 


- S4E65 


10160 - 


S7204 


330 


- S7F0F 


10170 - 


58365 


340 


- S098C 


10180 - 


S466A 


350 


- S3C7E 


10190 - 


S5C6A 


360 


- S9882 


10200 - 


SB6A0 


370 


- S32F9 


10210 - 


SF765 


380 


- SD61F 


10220 - 


SD5F1 


3.90 


- SD95E 


10230 - 


5BA69 


400 


- SC556 


10240 


S764A 


410 


- SD95A 


10250 - 


SB0D6 


420 


- SDACB 


10260 - 


S2A7A 


430 


- S3F10 


10273 - 


S9243 


440 


- SF817 


10280 


SF40E 


450 


- S7C8F 


10290 


S87C8 


460 


- SD3B4 


10300 


S19BB 


470 


- 58288 




S 
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by Dave Stanton 



Hartle\ Courseware, 
(51 7) 646 6458 



Inc. 



Requirements: 

4SK Apple ][ or equivalent 

Blank disks 

Super IOB 1.5 

A way into the monitor, or 

I28K I hot lie with XFER. BOOT/RESTORE 

Original Hartley disks 

Few educational software companies have 
been more prolific than Hartley . Though many 
of Hartley's programs were written in the early 
eighties, they continue to be staples in the 
schools. 

The programs generally lack fancy graphics 
and are quite slow in operation. However, they 
are easy to ran. and they provide for teacher- 
modification. As drill and practice tools, they 
offer many advantages over the traditional pen 
and paper process. 

An especially noteworthy feature of the series 
is its student record keeping. The program 
maintains a record of results for each person 
who tries it. Those results can be accessed by 
the teacher or parent as necessary. 

As with any purchased software, prudence 
requires thai a backup be kept safely tucked 
away for emergencies. While most copiers will 
handle Hartley software, these softkeys will 
permit you to analyze and modify the programs 
and lexlfiles. 

For de- protect ion purposes, the company's 
programs can be classified into two groups: (1) 
the ' ' Medalist Series" and other recent 
programs; (2) "Verbs." "Synonyms and 
Antonyms," and other pre- 1984 programs. 

Hartley uses two distinci protection schemes 
on its releases. Neither is very complicated, and 
the one used on the "Medalist Series" is the 
simplest. 

The Medalist Series 

"The Nibbler" (COMPUTIST No. 19) 
reveals essentially standard tracks and sectors 
with minor changes in the address field and data 



field epilogues. The standard DE A A bytes have 
been changed to DA AA. 

If you wish to check, you will notice 
unusually long sync fields between some 
sectors. Those fields often contain non-standard 
sync bytes (something other than YY). This 
should pose no problem. 

Finally, some sectors appear to be normal at 
firsl, but they cause read errors when Super IOB 
tries to copy them. Although there could be 
many reasons for this, further analysis is 
unnecessary, since a perfectly functioning copy 
can be produced by activating the ignore 
unreadable sectors routine. 

The Procedure: 

1) Initialize a disk. 
INIT HELLO 

2) Install Hartley Controller A below into Super 
IOB 1.5 and RUN it, 

3) Ignore the disk rattle. Some disks copy 
quietly, othets protest. 

This technique will also work on 
"Capitalization Practice" and "Capitalization 
Test." If you have other relatively recent 
releases, you may want to try this first. 

controller A 

1000 REM HARTLEY CONTROLLER A 

1010 POKE 775 ,96 : TK = 3 : LT = 35 . ST = 15 : LS = 

15 :CD = NR :FAST = 1 
1020RESTORE. GOSUB 170 : GOSUB 490 ; GOSUB 610 
1030 GOSUB 230 : GOSUB 490 : GOSUB 610 : IFPELK 

{TRK ) - LT THEN 1050 
1040 TK = PEEK (TRK) . ST = PEEK (SCT > .GOTO 1020 
1050 HOME : PRINT "COPY" DONE!" : fcND 
5009 DATA 218 ,170 ,218 .170 

Pre- 1984 Hartley Software 

The early programs from Hartley appear to 
be on slightly modified DOS 3.2 disks. 
Checking the raw nibbles with The Nibbler 
shows that each track contains only 13 sectors. 
Furthermore, (he address field prologue is D5 
AA B5, normal for DOS 3.2. 

Since the address and data field epilogues 
vary from sector lo sector, we will capture the 
RWTS and use a customized swap controller 
to load from the original disks. 

Copying a 13 sector disk with Super IOB 1.5 
requires two unique changes. The values of ST 
and LS must be changed to 12, and a 
modification of the machine language 
subroutine must be made. POKE 9(t(U2 tells 



the ML routine to reiid only thirteen sectors 

instead of the usual sixteen. 
The Procedure: 

1) Initialize a blank disk with DOS 3..L 
INIT HELLO 

2) Oct your favorite way into the monitor ready, 
or load XFER.BOOT (COMPUTIST No. 28, 
pg. 15) and use it to boot the program into the 
extended 80 column card of your //e or He. 

BLOAD XFER.BOOT 
PR #3 
CALL 768 

3) Stop the boot by opening your disk drive gate 
as soon as you see the first screen, 

4) Hit Reset. Load and install RESTORE, 
XFER. ROOT's companion program. 

CALL -151 
3FX: 4C m B3 
BLOAD RESTORE 

5) Move the trapped RWTS into lower memory 
at $1900. 

1900<B800.BFFFEDr] 

If you didn't use the RAM card method, type 
this instead. 

19tM»<R8Stfl.BFFFM 

6) Save the protected RWTS on your Super IOB 
1.5 disk. 

BSAVE HARTLEY. RWTS,A$;|<W>,LtS(Ht 

7) Run Super IOB with Controller B below 
installed. 



controller B 

1000 REM HARTLEY CONTROLLER B 

1010TK-3 :LT-35 :ST- 12 . LS = 1 2 : CD - 'fVR . FAST 

= 1 : POKE 900 ,12 : POKE 775 ,96 
1020 GOSUB 350 GOSUB 490 : GOSUB 610 
1030 GOSUB 360 : GOSUB 490 : GOSUB 610 : IF PEEK 

(TRK) - LTTHEN 1050 
1040TK = PEEK (TRK) :ST = PEEK (SCT) GOTO 1020 
1050 HOME : PRINT "COPY* DONE! " . END 
10010 PRINT CHRS (4 ) "BLOADHARTLEY.RWTS. 

AS1900" 

In addition to the peace of mind that backups 
provide, you will now be able Lo modify your 
programs, put them on a hard disk, or do 
whatever you wish to improve them. Enjoy! 
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by Dick Meikle 
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Requirements: 

Apple ][ Plus ur equivalent 
A blank disk 
FID or similar 

Bridge is a utility that transfers PFS Scries 
files to DOS 3-3 text, DIF : or Apple writer ][ 
mail list files. Those of us who now use 
Appleworks for most data base, word 
processing and spreadsheet work have iound 
this utility an absolute necessity for transferring 
our old PFS; File records to ProDOS format. 
Bridge cannot transfer files directly from PFS 
(Pascal) files to ProDOS. First the PFS Hies 
must be converted to DOS .1 .3 text or DIF Files 
with the Bridge. Then these files are converted 



LOAD BRIDGE,AS8fW 

Then I entered the monitor. 

CALL -151 

After trying several locations by using the 
monitor G(o) command. 1 tried fc:00G. When 
I did this, the drive turned on and the head 
moved to track $23 to start its search for the 
first three bytes at Sector $0F. I then knew that 
I had found the entry point for the protection 
scheme. At this point, all I needed to do was 
disarm the Track $23 search. When I listed the 
program at SE0B, 

E0B- LDA $0800 Check $800 

E0E- CMP *J4C Is it a S4C7 (a JMP) 

E10- BNE S0E15 Then go to protection 

E12- JMP S0EF9 Else start program 

E15- LDA M15 Set up Reset vector 

E17- STA S03F2 (to point to 5E15) 

EiA- lda am 

E1C- STA S03F3 

E1F- E0R #$A5 

E21- STA S03F4 

E?4- LDY £$'23 Track S sector 

E26- LDA #$0F to read 

E28- LDX </J01 



EfflflG and the main screen appeared. I ran the 
program through a scries of tests to sec if it 
operated properly. The program appeared to 
work flawlessly . This was the entry point I was 
looking to find. There was only one more 
problem to eliminate. After making sure the 
three bytes SAD Sxx £yy at 5800-$R02 were 
not necessary for program operation. I changed 
these bytes to Jump to $0E00, 

8flfl:4C m BE 

This is necessary because if you use the 
"change menu" option at any time, Bridge is 
rewritten to the disk with a BSAVE 
BRIDGE. A$800,L$2400. If the JMP S0E00 is 
placed at S7ED, 3 bytes before $860, the JMP 
will not be written back to the disk. The next 
time Bridge is BRUN the Applesoft prompt will 
appear and Bridge will not work. Putting the 
JMP at $800 eliminates this problem. 

Steps for the Softkey 

1) Boot DOS 3.3 and initialize a blank DOS 3.3 
disk. 

FR#6 

NEW 

INIT HELLO 



softkey for 



QjBUQXDll 



to ProDOS using the ProDOS users disk. 

Bridge can be copied (tUD, Copy J[, etc, . .) 
by copying tracks 0-.$23. Track $23 is not 
usually copied by most copy programs. On 
track $23, sector SF, there are 3 bytes necessary 
for the program to boot, If byte $02 on track 
$23, sector $F is greater than $00 you are 
permitted to make a copy through the built-in 
copy program. On the original this byte is a 
$01 . After you make one backup, this byte is 
changed to a $00. Therefore, you will not be 
able to make another copy. Initially, 1 changed 
this byte to $FF. This way I could make 255 
copies from the original, as this byte will be 
decremented by $01 each time a copy is made. 

[.ike most people, I like to have many utilities 
on a single DOS 3.3 disk. Bridge is a total load 
program, so [ set out to make a normal BRUN 
file. I tried to BRUN BRIDGE with DOS 3.3. 
but after loading, I received an Applesoft 
prompt and it ceased execution. This told me 
that Bridge does not start at $800 (which is 
where it starts to load). Feeling that if 1 could 
find the program entry point, it might be able 
to run under DOS 3.3, I booted DOS 3.3 and 
loaded Bridge from my original. 



E2A- JSR S0836 Gosub read routine 
E2D- BCS 50E53 If read bad then crash 
E2F- LDA S083F Store the address of 
E32- STA $06 the three bytes from 
E34- LDA $0340 trk $23, set SF in zero 
E37- STA $07 page locations $6-17 
E39- LDY #$00 Set Y index to 
E3B- LDA (106), Y Get first byte 
E3D- CMP $801 Compare to val at $801 
E40- BNE S3E53 If no match then crash 
E42- INY Next Y 

E43- LDA ($06) ,Y Get 2nd byte 
E45- CMP $802 Compare with S802 
E48- BNE S0E53 If no match, crash 
E4A- INY Next Y 

E4B- LDA ($06), Y Get third byte 
E4D- STA S29DD Store it at $29D0 
E50- JMP S0EEA Start the program 

I noticed that it starts by loading the 
accumulator with the byte at $800 and 
comparing it with the number S4C to see if it 
is a JMP. On my copy $800 contained SAD, 
so this caused a Branch if Not Equal (BNE) at 
SE10. I NOPed (No Operation) the BNE. 

E19: EA EA 

This way the branch is not taken to the 
protection routine starting at SE 15.1 again tried 



2) BLOAD Bridge from the original, 
BLOAD BRIDGE,A$8fl0 

3) Enter the monitor. 
CALL -151 

4) NOP the Branch to the protection scheme 
and set the beginning to the program entry 
point. 

E10: EA EA 
8M>: 4C W «E 

5) Save Bridge back to the DOS 3,3 disk, 
BSAVE BRIDOR,A$8Wt,L$24flft 

6) Transfer the MAILLIST file from the Bridge 
disk to the DOS 3.3 disk using the file FID. 

You now have a COPYAable and Brunable 
Bridge. Bridge may now be transferred to anv 
DOS 3.3 disk. 

The file MAILLIST is a WPL (word 
processing language) file used only for 
Applewriter ][ mail list usage. If you don't use 
Applewriter 1[ for merging a mailing list with 
a letter it will not be necessary to transfer 
MAILLIST to the slave disk. _ 

s 
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Using Data Disks With... 



Microzines 



by Wesley R. Felty 



In COMPUTLST No. 27, there are three 
articles on de-protecting Microzines. The first 
two softkeys using the Super 10 B program 
didn't work at till for my versions of Microzines 
Volume 1, numbers 2-6. Eric Ondler's method 
(page 14) did work, but unfortunately, none of 
the methods given would allow the de-protected 
Microzines to create or use data disks. This 
article will give the general technique needed 
to patch the Microzines and specific fixes for 
Microzines 2-6 (Volume 1). 

First of all, let's look at the problem. The 
original protected Microzines all run on a non- 
standard DOS. In order for them to use a data 
disk with normal DOS. each Microzine's 
special DOS includes special routines (located 
around 46748) to switch back and forth from 
the special DOS to a normal DOS. Therefore, 
each of the Microzine programs that needs data 
disks uses CALLs to activate one DOS oi return 
to the other. The CALLs are to variable names 
like "DOS", "DS", and -'DO" to turn on the 
data disk DOS and "XD 77 or "XDOS 77 to 
return to the Microzine's modified DOS. But 
when we de-protect the Microzines. we replace 
the special DOS with a normal one, so all of 
the DOS switching CALLs "bomb" and exit 
the program in the monitor. 

To be ahle to use data disks with de protected 
Microzines. wc have to determine which 
programs in each Microzine use them, find and 
eliminate the CALLs to switch DOSes within 
them, and eliminate the DOS switching CALLs 
from the program on each Microzine disk that 
creates ihe data disks. The program descriptions 
usually tell us if a data disk can be used with 
each program, hut it is a little trickier to find 
the actual program to patch since the Microzine 
may load three or four other programs before 
it gets to the real one. It usually loads graphics 
screens, tnachine language routines, instruction 
programs, etc. before it runs the real program. 
To find the acttial programs thai contain the 
code to be patched, boot the de-protected 
Microzine and when the main menu appears, 
press Reset. 1'hcn type "MONICO" (see your 
DOS manual) and then "RUN." Now. as each 
file or program gets loaded, a message will be 
printed to the screen showing the full DOS 
command loading or running it. Just run the 
programs normally until the program bombs 
into tfie monitor after asking you to insert the 
data disk. The last program that was RUN is 



the one to patch. To turn off the MON mode, 
you can just hit Reset, or enter ' 'NOMONICO' ' 
from immediate mode. 

It is fairly easy to find the CALLs to look 
for if you have the proper looks, One of the first 
several lines will have code like "DOS - 
46784: XDOS = DOS + 6", showing what 
parameters switch the DOS back and forth. If 
you have an Applesoft program line editor, like 
GPLK. it shouldn't be too hard to find the lines 
with the CALLs and delete them. Leave the rest 
of the line as it was and don't delete any calls 
other than the calls to switch DOS. In most 
lines, both CALLs arc in the same line, usually 
surrounding commands to "OPEN" or 
"CLOSE" and "READ" or "WRITE" text 
files. If the second CALL isn't in the same line 
as the first one, then it should he somewhere 
in the next few lines. You may have to do a 
manual search of the longer lines if your editor 
has trouble with packed lines. If you leave some 
of the "CALL DOS" or "CALL XDOS" 
CALLs in, then the program will bomb into the 
monitor when it gets to them at a later time, 
so he sure to thoroughly test the data disk 
routines later. Finish up by saving the Applesoft 
program back to disk. Below are lists of the 
program lines that needed to be changed on my 
Microzines, including lite names of the 
variables used to switch DOSes. On disk HI, 
the Melody Maker program is the only one 
needing a data disk, and it didn't use the calls 
so no patching is needed with it. 

Using Data Disks That Need Changes 

Vol 1, Disk 3: 

program RR MAIN, variables DOS, XD 
6020, 6030, 6040, 6050, 6060, 6230, 6240, 
6250, 6280. 6410, 6420, 6430, 6450, 6620, 
6630, 6905 6910, 6920, 6930, 6940, 20000, 
4415 Change to 4415 REM 

Vol 1, Disk 4: 

program LOG, variables DS. XD 

46, 90. 96, 324, 330. 360, 378, 406, 

416, 422, 432, 642, 648, 658, 672, 884, 

13000 

Vol 1. Disk 5: 

program TR MAIN, variables D0 : XD 

6905 6805 change to 6805 REM 



Vol 1, Disk 6 

program OLYMPIC RECORDS, vars DOS. XD 
8010. 8030. 8050, 8070, 8085. 8090. 8100 
61420, 61430, 61620, 61630 

Vol 1. Disk 6 

program SOUND OFF!, variables DOS, XDOS 
5025, 8018, 8204, 8320, 9300, 9318, 
10982. 10988 



Vol 1, Disk 5: 

program MAKEABOOK, variables DO, XD 
1110, 5020 (type a g3D| before DELETE) 
3960. 8100, 8125. 8205, 8225. 8310, 8401 
9318, 10984, 11000, 20000, 61215, 61230 



Finally, we need to change the program on 
each Microzine disk that creates the data disks 
Actually, we could fix just one of them and use 
it to produce data disks for all of the other 
Microzines, but I hate to have partially working 
disks around, so I'll show the changes needed 
on Volume 1, Microzine numbers 2-6. 
Fortunately, on all of the Microzines, the data 
disks are produced in a program named 
"UTILITIES 77 by BLOADing a File called 
"INIT.OBJ" at $9306 and issuing a "CALL 
37632". All we have to do with each Microzine 
is to '"LOAD UTILITIES 77 , delete the CALLs 
to switch DOSes that surround the "CALL 
176.12", and "SAVE UTILITIES" back to the 
disk. In Microzine #2, no changes are needed 
at all. In Microzines #3 and #4, just delete lines 
3017 and 3024 and "SAVE UTILITIES" back 
to disk. And in Microzines #5 and #6, just 
delete the "CALL DO" and the "CALL XD" 
from line .3010 and save UTILITIES back to 
the disk. That's it! Wc can now create and use 
data disks with all of the Volume 1 Microzines. 
I'm sure that the genera) method will also work 
with all of the other Microzines. 

Recovering APEX 

In COMPUTIST No, 27 (page 10). L.A. 
Carreira gave instructions to copy the file 
"APEX" or "HRCCJ" from a later Microzine 
hack to Microzines #1 and #2 But what if you 
don't have a later Microzine? It is possible to 
recover the code from the original Microzine 
if you have a method oT resetting out of the 
program into the monitor after the title page gets 
displayed. This takes a hardware modification 
such as the Don Lancaster absolute reset (which 
1 highly recommend) or an old Integer Card. 
Then just put the de-protected disk in the drive 
and enter 

BSAVE APEX, A$Eflfl, L$1200 

And, finally, add a line like 

48 PRINT CIIR$(4)"RT J OAD APEX" 

into the HELLO program. 
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by Joe Drelling 



'Springboard StiflWare, ttk' 
7S07 Greekrittge Circle, 
Minneapolis, MN 55435 
{612) 944-1912 



Requirements: 

Apple 1| Plus and up 

A slave disk with no HELLO program 

One blank disk 

Super 10B tj 

Early Games Tor Young Children 

Early Games for Young Children (Early 
Games) is another popular educational game for 
small children. The game is supposed to be 
designed for children aged 2 1 12 to 6 but it keeps 
my one-year-old son constructively entertained 
(with some assistance). Early Games has nine 
educational games including: Number 
Matching, Counting, Addition, Subtraction, 
Letter Matching, the Alphabet. Names, 
Comparing Shapes, and Picture Drawing, 
Though the programs can be easily run on a 
monochrome monitor, all of the games take full 
advantage of the Apple's color capability to help 
keep a child's attention. Animation and sound 
routines are also utilised as positive 
reinforcement for correct answers. 

The only problem I have found with Early 
Games is that, for some reason. Springboard 
has decided to copy protect it. The main menu 
and the games are all designed to allow small 
children to use the computer unsupervised if 
necessary. I fail to see the logic in giving any 
small child an original $39.95 disk and expect 
him. (or her) not to damage it. Thus I decided 
to make a backup copy for routine use. 



The Investigation 

When I first booted the Early Games disk it 
sounded as if the disk drive was constantly 
moving back to check a particular track tor a 
nibble count, Since 1 had had success backing 
up other nibble counts with some commercial 
copy programs, I decided to try my favorite 
copy routines first. My initial attempt to back 
up Early Games was with the Automatic Bit 
Copier in Copy |[ Phis, Version 5.4. Although 
Early Games appeared to copy properly, the 
backup would not boot . My second try utilized 
the default parameters on Locksmith 5.0, 
Revision F. The Locksmith copy did boot 
though it would not run properly and required 
the disk drive to recalibrate on numerous 
occasions. This was an unacceptable solution! 

Not wanting to attempt a boot code trace yet, 
1 started looking for a way to enter the monitor 
in an attempt to capture the Read Write Track 
Sector (RWTS) portion of DOS. To my surprise. 
my first attempt worked! I booted the the Early- 
Games disk and then immediately pressed 
IE) CI . This stopped the boot process but did 
not yield the Applesoft prompt which I had 
hoped for. Then I pressed the RESET key iwice 
in quick succession and was rewarded with the 
Applesoft prompt! To see if I had allowed the 
boot time to load the modified RWTS I tried 
to catalog the disk. Typing "CATALOG" only 
returned a beep, indicating that DOS had been 
modified, so 1 tried the alternative way of 
cataloging a disk, "CALL 42350". This 
resulted in a 24 file catalog scrolling up on my 
screen! It appeared that I would be able to 
capture the early games RWTS and dius be able 
to use the Newswap Controller routine to 
deprotect the Early Games disk. But it didn't 
turn out to be quite that easy. 

The Procedure 

After loading the Early Games DOS, which 
I verified by CATALOGing the Early Gaines 
disk (it would not CATALOG a standard DOS 
3.3 disk), I entered the monitor. This was 
accomplished with the following command: 

CALL -151 



Since most RWTS routines normally reside 
in memory between SR8O0 and SBFFP (those 
are hexadecimal numbers which equate to 
decimal 47104 and 49151) it was necessary to 
move that block of memory to another area in 
memory which would not be used during a 
warm boot. That way when a warm boot is done 
the modified RWTS will not be overwritten 
during the boot. The following mouitot 
command will move the Early Games RWTS 
to a safe area in memory; 

19ee<B8»fl.BFFFM 

That command moves (copies) the block of 
memory from SB 800 through SBFFF down to 
lower memory starting at $1900. The "M" at 
the end of the above command tells the monitor 
to "Move" a block of memory, 

Next it was necessary to reload DOS 3,3 into 
memory without losing the modified RWT.S. 
This was accomplished by doing a "warm 
boot" from the monitor. Before the command 
was given for a warm boat, the Early Games 
disk was removed from disk drive #1 and 
replaced with a DOS 3.3 disk which did not 
have a boot program (normally called 
"HELLO") on it. The warm boot was executed 
from the monitor by using die following 
command: 

C698G 

The "G" stands for "Go" which tells the 
monitor to execute the commands starting at 
memory location $C600. These are the Read 
Only Memory (ROM) instructions which tell 
your Apple how to do a "warm boot." 

Once the Applesoft prompt came up I entered 
the following command to save the modified 
RWTS: 

BSAVE RVVTS.EAKLY GAMES, 
A$19«J,L$88« 

Next I initialized a disk with a fast DOS (such 
as Diversi-DOS or Pronto -DOS) and a boot 
program named "HELLO": 

1NIT HELLO 

This DOS would replace the modified DOS 
on the Early Games backup disk. Then I deleted 
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the HELLO program on Lhe newly initialized 
disk: 

DELETE HELLO 

Once I had completed all of my preparations. 
1 entered the original Newswap Controller from 
COMPUTIST No. 22, page 21. I quickly 
discovered that it couldn't read the DOS tracks 
(tracks W-2) and it wouldn't copy track $A. 1 
was not concerned with the DOS tracks because 
I wanted to replace them on the backup, but 
track SA required some investigation. Not 
knowing what was on track SA, I loaded a 
sector editor to examine the track. A quick look 
at it proved on I my earlier suspicions lhat it was 
used for a nibble count routine. The track was 
full of $FF bytes with several marking bytes 
scattered throughout. Now all 1 had to do was 
to rewrite the swap controller so that it ignored 
track %A. 

After developing a way to make Super 10 B 
VI ,5 skip track SA I wrote the controller listed 
below with a word processor and saved it as 
a standard text file. I called the controller file 
'-F.ARLY GAMES CONTROLLER.'' After 
saving the controller I loaded Super IOB V 1 .5 
back into memory: 

LOAD SUPER IOB 1.5 

Then 1 executed the controller so that it 
loaded into memory with Super IOB 1.5: 

EXEC EARLY GAMES 
CONTROLLER 

Finally . I started the Super 10R program by 
typing "RUN." 1 did not select the format 
option since I had already initialized a disk tor 
the backup copy. Super IOB 1,5 then copied 
the Karly Games disk to a standard DOS 3.3 
disk. 

Fixes 

Once the copy process has been completed, 
LOAD the HELLO program into memory and 
LIST it. The following lines can be deleted: 

3 ONERR GOTO 1 

30 PRINT DJ"BRUN RST.SND2" 

32 PRINT Df'BRUN STOPPER" 

You can also delete RST.SND2 and STOPPER 
from the deprotected disk. 

Though these changes are not critical to the 
operation of the deprotected disk, they do allow 
you to exit lu an unmodified version of DOS 
3.3 by pressing the RESET key. If you do not 
make these changes you will have to reboot 
DOS after quitting the games. 

Another change which you can easily make 
will recover track SA. the one used for the 
nibble count. This will provide you some 
additional free space on your hackup disk to 
save your child's drawings on. First you 
initialize another disk with DOS 3.. 3 (or a fast 
DOS) which has a boot program called 
HELLO. Don't forget to DELETE the HELLO 
program again alter initializing the disk! Then 
use a tile copy program, such as FID. to copy 
the files over to the new disk. This procedure 
releases track SA which was unused, but not 
available, on your original IOB produced 
backup. 



Step by Step 

1) Initialize a blank disk with DOS 3.3 or a fast 
DOS and DELETE the boot program, 

INIT HELLO 
DELETE HELLO 

2) Type in the Early Games Controller listed 
below and save il as a text file (called EARLY 
GAMES CONTROLLER). 

3) Load the Early Games disk in disk drive it 1 
and boot it. 

PR#6 

4) Type IQCI as soon as the disk starts to boot. 

5) Press the Reset key twice quickly. This will 
cause the Applesoft prompt to appear on the 
screen. 

6) Enter the monitor and move the Early Games 
RWTS. 

CALL 151 
19H»<BSmRFFFM 

7) Replace the Early Games disk with a DOS 
3.3 disk with no HELLO program. Then 
execute a warm boot from the monitor. 

C600G 

8) Save the modified RWTS to disk. 
BSAVE RWTS.EARLY GAMES, 

A$i9ee, L$see 

If you CATALOG your DOS 3.3 disk you 
should now have ten sector binary file named 
RWTS.EARLY GAMES. 

9.) Load Super IOB 1.5 and install the 

controller. 

LOAD SUPER IOB 1.5 



EXEC EARLY GAMES CONTROLLER 

10) RUN Super [OB 1.5 but do not select the 
format disk option 

11) Make the recommended changes listed 
above, if desired, and let your children enjoy 
learning from a deprotected copy of Earlv 
Games for Young Children! 



controller 

1000 REM EARLV GAMES CONTROLLER 

1005 XX = ;TK = 3 :LT- 10 

1010 ST 15 ;LS= 15 :CD = WR ; FAST = 1 

1020 GOSUB 360 . GOSUB 490 . GOSUB 610 

1030 GOSUB 360 : GOSUB 490 : GOSUB 610 : I F PEFK 
(TRK) - LT THEN 1050 

1 040 TK = PEEK (TRK) ST = PEEK (SCT ) .GOTO 1020 

1050 !FX.X = 0THENTK= 11 :LT = 35 :XX = 1 : GOTO 
1010 

1060 HOME : PRINT "COPY' DONE" : END 

10010 PRINT CHRS {4 ) "BLOAD 4 RWTS EARLY" 
GAMES, AI1900" 



controller 



1000 - ¥3568 

1005 - $8838 

1010 - mm 

1030 - J3A9E 

1030 - S080A 



1040 - J3 BAG 

1050 - J9EB0 

1060 - 18559 

10010 - SCFAC 
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softkey for... 



Tawata's Last Redvu6t 



by Danny Pollak 



B>;>drrbimd Software 

! 7 Paid Drive 

S<in Rafael CA 94W3 



Requirements: 

48K Apple ][ Plus or equivalent 
Tawala's Last Redoubt 
Super IOB vl.5 
One blank disk 

Tawala's Last Redoubt (TLR) is a game in 
which you plaj the pan of the rebel leader, 
trying to defeat Emperor Tawala. You must use 
all of your resources to the best of your ability 
in order to overcome Tawala's forces and win 
the game. 

The Protection 

Considering when this game was published 
(1981), the protection is rather good. But then 
again, this is standard for Brodcrbund, They 
use multiple changing data headers as well as 
multiple address field closing marks. With the 
swap controller and the modified DOS 3.2 
RWTS from the game, this program can be 
taken care of with Super IOB, 

Step By Step 

1) Initialize a blank disk with DOS (preferably 
a fast one) using "HELLO" as the hello 
program. 

INIT HELLO 

2) The next thing that must be done is to capture 
the foreign RWTS. To do this, boot the TLR 
disk. When the question "How quickly do you 
wish time to pass on Tawala's Last Redoubt?" 
appears, bit Reset until the drive stops. 

3) Enter the monitor and move the RWTS (see 
note below) to a safe location, 

CALL-151 
19W<B6eft.BFFFM 



4) Insert a slave disk with no hello program, 
reboot normal DOS, and save the RWTS as a 
hinary file on your Super IOB disk, 

6 EF1 

BSAVE RWTS.TLR,A$19Oe,LUU0 

5) Install the controller below into Super IOB 
1.5 and then run it. Tracks $03 - $22 will be 
copied and you will have a de protected copy 
of TLR. 

controller 

60LOHEH: 8960 : HIHEM: 9983 ; GOTO 10010 
360 POKE 253 ,25 ! POKE 255 ,182 : POKE 224 ,10 

: CALL 832 : RETURN 
1000 REM TLR CONTROLLER 
1010 TK=3 :LT = 35 :ST = 12 :LS = 12 :CD=WR : FAST 

= 1 :MB = 130 
1015 POKE 900 .12 

1020 GOSUB 490 - GOSUB 360 . GOSUB 610 
1030 GOSUB 360 ; GOSUB 490 : GOSUB 610 . IF PEEK 

(TRK) = LT THEN 1050 
1040TK=PEEK(TRK) :ST = PE£K(SCT) :GOTO1020 
1050 HOME : PRINT "COPYDONE" : END 
10010 PRINT CHRS (4 ) "BLOAD* RWTS, TLR" 

controller checksums 



60 - SES2F 

360 - I0B5C 

1000 - S61E1 

1010 - S3B76 

1015 - S09DC 



1020 - 156FF 

1030 - J646B 

1040 - 3AE52 

1050 - (DBAS 

10010 - J9A69 



Editor's note; The IOB controller and the 
instructions tnay look a bit strange here. This 
is because the controller has been set to copy 
DOS 3. 2's 13 sectors per track (lines 1010 and 
1015), and the RWIS of the game is slightly 
larger because it needs subroutines in the 
SB60&-SB700 area. To. fix that, we saved the 
RWTS plus the extra two pages and modified 
Super IOB to reserve extra room for them (line 
60). Notice that room has to be taken from the 
buffer to do this. The swap routine (tine 360) 
also needed modification to move more memory. 

Technically, Beneath Apple DOS by Don 
Worth & Pieler Lechner considers the memory 
SB6W-B7FF as part of RWTS, but it normally 
contains non-critical information like the boot 
code (kept around for INITing). ^ 

1 



Adventure 
Tips 



ULTIMA in 

• A single key and bribe can start you to 
unlimited, risk-free riches at Death Gulch. 

• To ride through Death is much healthier 
than walking. 

By Don R DcHalas 

ULTIMA 

• Ruy ladder spells in the towns. 

• Finding natural ladders in the dungeons 
is a very difficult business, and they are too 
hard to map, 

• Stealing things in the towns is risky even 
for a high-level thief and to sell them back 
to the unsuspecting owners is outrageous, 
but it's a way to get needed funds and exotic 
advanced items before they ate offered for 
sale. 

• In the castle, kill the jester and get a key 
to unlock the princess. 

• You'll have to fight some strong guards 
to do so, so have a lot of hit points. (Save 
before you enter castle.) 

• In outer space, mapping the starbases will 
aid in getting through the scenario faster, 
later. 

By Paul Wilson 

SUSPECT 

• Don't take the broken glass directly. 

• Instead lake the trash basket which 
Smythe put it in. and give that to the 
detective. 

• Search the fairy mask for a clue. 

• Meet Lieia at the front door by being 
there at 9:18. 

• Look up, 

• Veronica wrote you a very nice letter of 
invitation. 

• Why then was she so brusque to you 
when she went to the office at 9:01? 

• Showing evidence to the detective. 

• Being arrested at 11:40? 

• Will thwart the frame-up. 

By Paul Wilson 
PRISONER II 

• Find key. 

• Look around maze. 

• Go to school. 

• Be good. 

• Stay away from a bad element. 

• Go to court, if you are thrown out go back 
a few times. 

• Take a chance in court - write it down. 

• The grail is forward . 

• When you come to the end of the game 
until! the truth then lie. 

• The island is a computer. 

• Do not give out your number, lie. 

By Ed Higgins 
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Another Stupid Diskbuateig T-Sluft Advertitament 



It's the.. 



COMPUTIST 

Multi-Purpose Cloth 



101 uses! use n for... 

Cleaning! Dusting! Polishing! 

Shopping! Wiping Spills! Gardening! 

A Birdcage Cover! A Birdcage Liner! 

You can even wear it as clothing! 

A fashion statement! 

A political statement! 

An understatement! 



Yes, I want . 



. C.M.P.C.s in the size(s) indicated below. J have enclosed 



$9.95 plus tax and shipping for each t-shirt. 
ADULT MENS: Small Medium 



Large 



[-Large 



Name. 



.nw_ 



Address. 
City 



Country 



_£tate_ 



-Zip_ 



Phone 



Exp 



Signature. 



_CP32 



Send check or money order to: CMPC PO Box 1 10937- A Tacoma, WA 98411 
Washington orders acid 7.8% gales tax. Foreign ord&rs add 20% shipping and handling. 
US funds drawn on US bank. OFFER GOOD WHILE SUPPLIES LAST. 
NOT FOB IH.EGAL, IMMORAL, OR FATTENING USE. 



38 (j: per disk? 

And that INCLUDES the Tyvek sleeve, too? 



SS/DD 
5 V4 " 
for use 
with: 

* Apple 

* Commodore 



Verbatim disks 
for only 



S+fld yQur nnhf to: 

Disk Offer 

SoflKey Publishing 
POBQX11093T-A 

Tt03mi,WA9H411 
Enclose S3 ship-p. 
irtg £ handling (or 
Iho firsl s&t PLUS 
$1 Tor each addi' 
tonal set. Foreign 
ordeFs add 20% 
sn;p3'ng &. Handl- 
ing US funds 
drawn on US bank. 
Washington sfele 
ordars add 7,8% 
sales tax Orders 
shippad vis. UPS, 
please use 
street address. 



J Sold only in 
sets of 25. 

1 100% 

guaranteed. 
• reinforced 

hubs. 

1 Tyvek 
sleeves & 
Write- protect 
tabs included. 



Pleas* semi me seta (25 disks per set) of 5ft" SS/DD 

diskettes. I have encFosed (17 PLUS shipping & handling for each 
set and made checks / money orders payable to SoftKey 
Publishing. 



Name 




101 


Address 






City 


Statu 


Zip 


Country 


Phnnp 




Signature 




Exp. 




yOUB 



DISKS 



EDD is sold for 
the sole purpose 
of making archival 
copies ONLY! 



EDD Version 4 Is the most powerful copy program available for 
backing up "uncopyable" or "copy- protected" disks. ■ In addition to 
backing up disks, EDD 4 also features a hi-resolution graphic DISK SCAN 
option to help you locate information on a disk, a CERTIFY DISK option for 
certifying blank disks, and since it's very important that your disk drives are 
running properly (especially when copying disks), we have also included an 
EXAMINE DISK DRIVE option. ■ Even though EDD 4 has been preset to 
copy the broadest range of copy- protections possible, EDD 4 can be "modified' 1 
to back up almost any disk that runs on your Apple! ■ For the dedicated user, 
in addition to EDD 4, we are offering an EDD 4 PLUS version that includes 
a specially designed hardware card which allows EDD to copy EVERY bit 
of information from each track accurately! You can bet that if EDD 4 PLUS 
c&n't copy it, nothing will! ■ EDD 4 runs on an Apple II, II Plus (including 
most compatibles, lie. lie, and III (using emulation mode), and is priced 
at $79.95. ■ EDD 4 PLUS runs on Apple II, II Plus (Including most com- 
patibles), and lie, and is priced al $129.95 (duodisk/unidisk 5.25 owners 
must add $15 for a special cable adapter). Ask for EDD at your local 
dealer, or to order direct, include $3 ($6 foreign) shipping/handling for 
EDD 4, or include $5 ($8 foreign) for EDD 4 PLUS. ■ Mastercard and 
Visa accepted. All orders must be prepaid. ■ If you have an earlier 
version of EDD, you can update to EDD 4 or EDD 4 PLUS at a reduced 
price. Send your EDD disk to us, and deduct $50 from your order. 



UTILICO MICROWARE 

3377 SOLANO AVENUE / SUITE 352 / NAPA, CA 94558/707-257-2420 



ESSENTIAL DATA DUPLICATOR 4 



Public Domain Software 

SPECIAL 

From The COMPUTER LEARNING CENTER! 



GET Over 170 



BUSINESS 
& FINANCE 

Programs FOR ONLY 



$28. 



00 



■ Forecast your investment profits, and evaluate the worth of your 

stock portfolio 

• Experiment with Visicalc formulas, real estate and stock plots 

and design a business or personal letter writing format 

* Organize your household expenses 

■ Balance your checkbook, manage your loans, payroll 

The Business & Finance SPECIAL contains the following 
programs and many mora... 



Annuity 

Bond Price & Interest 

Budget Monthly 

Decision Matrix 

Financial Pak 

Keogh Savings Program 

Mortgage Calculation 

Regular Deposits I 

Stocks 

Calendar Personal 

Letter Writer 

Phone List 



Real Estate Plot 
Visicalc Formulas 
Business Finance 
Check Stub 

Household Exp, Profile 
Income Tax1040 For 77 
Inventory Company 
Average Growth Rate 
Check Book Balancer 
Income Taxes 
Interest Earned 
Loan Balance 

ORDER NOW! 



Savings Growtd 
Treasury Bill Valuation 
Address File 
Compound Int. Tables 
File Manager 
Home Accounting 
Names Search 
File Cabinet I 
Family Finance 
Gen Ledger Printer 
Con star 
etc... 



You will also receive a complete catalog of Public Domain 
Software available from the CLC with your order. 



□ Yes! Please send me the Business & Finance Special Offer 
(Volumes 1 8-25 from the CLC Public Domain Library). I understand 
lhat Public Domain Software is not commercial quality and is sup- 
plied as-is and that orders are filled on double sided disks. 



Name. 



S4 



Address 



City 



St 



Zip 



Phone 



Eft 



Country 

VISA/MC „- 

Signature 

Send check or money order (US funds drawn on US bank) to: 
Computer Learning Center, PO Box 110876-HC, Tacoma, WA 
9841 1 . Washington residents add 7.8% sales tax. Foreign orders 
add 20% shipping and handling 



(The Computer Learntng Center's PDS Library contains over f 75 volumes, 
which will run on Apple j[ Plus computers and Apple compatibles. Most will 
also tun on Apple It% and ilc.) 




„„..» »l«m.» "*"" •»•'•'"' 

EDD ** and 
TRAK STAR- 




PRICED SEPARATELY: 



TRAK STAR 99" 

2-Drlve Adapter (required for 2-drlve systems) $12 

Documentation: $3 * Please add S3 for shipping 

Refundable with the & handling. Foreign airmail & 

purchase of TRAK STAR handling, add $8 
DuoDisK & Ilc owners write. 

Save copying time 
with nibbie programs 

> Works with nibble copy programs to display 
tracks and half tracks that the program 
accesses. 

• Operates with any Apple™ -compatible program. 

• Save time by copying only the tracks 
being used. 

• Displays up to 80 tracks and half-tracks; 
compatible with high density drives. 

• If copied program doesn't run, Trak Star 
displays track to be recopied. 

■ Includes patching software for Trak Star. 

• Compact size permits placement on top of 
disk drive. 

• Does not use a slot in the Apple* computer. 

• For Apple II, II + , lie and compatibles. 



Pareonai checks, 
M.O., VISA & 

Mastercard 
■copied. 



MH\ 



Apple Is a registered 
trademark of Apple 
Computer, Inc. EDD III 
It a trademark of 
UlllkiO Mkrow&re 



Midwest Microsystems 



To order, phone: 
913 676-7242 



9071 Metcalf /Suite 124 
Overland Park, KS 66212 



Back Issues & Library Disks order form 



Issue 



32 

31 
30 
29 
28 
27 
26 
25 
24 



23 



18 



22 

21 

20 
19 

3 1 
17 
16 
15 
14 
1 
12 

A 1 
10 
9. 
"S 



..■ * _ 
"3 . . 
"Core 2 
*2 



13 



11 



1 . . . 

'Core 



Core 3 . 

Computing 3 



Mag Dish Both 

S4.75 S9.9B S12.9& 

nun 

n n m 

□ cj __ 

mi u 

□ □ a 
i i □ n 
n n n 
i d rj 

□ tj n 
ci n n 
iii m 

NA NA 

n n m 

IM _ l_l 

L I U U 

I I I I U 

U C! U 

NA U NA 

NA n NA 

i i in □ 

NA CI NA 



NA L 



NA 



NA n NA 



NA 

NA 

□ 



: 



NA 

r 



NA □ NA 

CJ 



NA 

I I 

NA 

n 



i uu 



!_' 

NA 

I - 
NA 



□ □ CI 
I I NA NA 



Special "Both" disk & magazine 

combination orders apply to one 

Issue and its corresponding 

disk. 

* Some disks apply to more 

than one issue and are shown as 

taller boxes. 

We have a limited supply 
of these issues. 



BACK ISSUES 

and 

LIBRARY 
DISKS 

of COMPUTIST (formerly Hardcore COMPUTIST ) 

are still available, though some issues (marked NA) are sold out, 
library disks are available for ALL issues of COMPUTIST. 

LIBRARY DISKS 

are perfect companions for 

COMPUTIST 

Documentation for Library Disks is in the corresponding issue. 



Send me the back issues and/or library disks indicated 

Nam* . .. 

Address . _ 

Cily Stale 



ID'. 



Zip 



Country . 

SEW 

Signature. 



Phone 



Exu 



CP3? 



Send cheek or money order to: COMPUTIST PO Box 110937-A Tacoma, WA 98411. Most orders shipped 
UPS so please use street address. Otter good while supply lasts. In Washington state: add ?.S«Ji sales tax 



Back Issue Rates For Foreign Orders 



FOREIGN MAGAZINE ORDERS ■• 
Price for each magazine includes shipping. 

1-2 copies 



3 to 4 copies 5 or more copies 



Canada/Mexico .... $8.00 each $7.00 each $6.00 each . 

Other Foreign $14.25 each $13.25 each 12.25 each, 



FOREIGN DISK ORDERS 



Disks are Si 1.94 each (includes shipping). Special "Both" disk and magazine combinations shown 
do NOT apply to Foreign orders. US funds drawn on US banks. All foreign orders sent AIR RATES. 



Description of Available Back Issues 



■*mm* Mm Stjfifiivi Tiivia Fever | The Original 
Boston Computer Diet I.ifesavei Synergbik 1 
Software Blazing Paddles | Zardax Renders" 
Sofikeys Tins Zone | Tycoon I Earthly Delights I 
Jingle Disk Crystal Caverns I Karate Champ I 
Feature A Linle Help With The Bard's Tale | Core i 
Black Ro\ ! Unrestricted Ampersand 



Sofikeys Millionaire I SSI's RDOS 
Kama vision Spy vs. .Spy | Drasonworld | Rentiers' 
S<>fike\s King's (Juesl Mastering [fie SAT I Easy as 
ARC gjsass Statute] The Factory Visides [.IE 
Sherlock Holmes The Bards Title Fi'iimrr 
Increasing Yout Di.sk Ciipacity I Com Ullimakcr IV. 
an Ultima IV Character Hditor I ,. 



Suftkeys | Threshold Checkers vl I 
M st roty pe I Ge n , & Organic Chcm ist ry Scr ics U ptmvn 
Trivia | Murder by the Dozen I Rentiers' Soflkeys 
Windham's Classics | Batter Up I Evelyn Wood's 
Dynamic Reader I Jenny of the Prairie I Learn About 
SoanJs in Reading Wniicr Games | Feature | 
Customi/ine the Monitor by Adding fiSCfil 
Disassembly | Cure | The Animator I 



Stitikeys | Ultima IV | Roboi Odvssev 
Rendezvous | Word Attack & Classmate Three from 
Mindscape '■ Alphabetic Keyboiirdinji Hacker | Disk 
Director Lode Runner | MIDI. ; 4 Readers' Seijikeis 
Alaehra Series I Time is Money Pitstop II I Apventure 
lo Alliums | h emu re Capturing the Hidden Archon 
Editor | Cure. Fingerprint Plus: A Review Beneath 
Beyond Castle* Wolfenslein fpart 2) ! 



Stiftkess | Microzlnes \-5 I Mtcrozincs 
7-9 MJcmzin.es (alleruale mellairl) Plii Rela Filer 
Smord of Kadash | Renders Suflkea | A not he i Muiei 
20-Wer Learning With Fuzzywomp I Bookends 
Apple Logo II Murder on the Ziiidcrncuf | features 
Llalcks: Explorinj! Artificial Intel licence i Making j2K 
or ItvK Slave Disks Cure I The (James of 1085: part 
II 



Sujtkeys | Can nop ha 1 1 Blitz Instant 
Besall I Ge.ssler Spanish Software More Sticky bears ' 
Renders ' Sttffkevs Financial Cookbook Super 
Zaxxon Wizardry I Preschool Fun | Holy Grail 
Inca l2i4KZasson Feature PmFdit | Cure Games 
.of mi part I 



Suftkeys | DB Master 4.2 Business 
Writer Barron's Computet SAT Take I | Bank Street 
Speller | Where In The World [s Carmen Saudiego I 
Bank Sireet Writer 12SK I W.ord Challenge | Readers' 
Bofikcys Spy's Demise I Mind Prober | BC's Quest For 
Tires | Earlv Games I Homeword Speller I Feature I 
Adding IF THEN ELSE To Applesuli | Core . DOS Tu 
ProDOS Aral Back I 



SttfikeyiL | Fleelruuh: Ark software 
Grolicr software Xvphu.s | p-15 Strike Eagle | Incited 
Engine I Renders' Suftkeys | Mr. Robot And His Robot 
Factory ' Appiccillin II | Alphabet Zoo Fathoms 40 
Story Maker Early Games Matchmaker I Robots Of 
Dawn Feature I Essential Data Duplicator copy 
parms ' Care Direct Sector Access From DOS | .. 



Softkeys \ Chop lifter M it f plot 

Flasheale | Karaleka , Newsroom | E-Z Draw 
Renders' Suftkers . Gall) I Dtno Eggs I Pinball 
Construction Set TAC The Print Shop: Graphics 
Library Death In The Caribbean | Feumies | Using 
A.R.D. To Softkey Mars Cars | How To Be The 
Writcmastcr Cure | Wheel Of Money | , 



So/ikeys Miner 2049er I Lode Runner 
A2-PB1 Pntball'l Readers' Sofikeys I The Heist Old 
Ironsides I Grandma's House | In Search of the Mosr 
Amazing Thirl" | Mnrloc's Towei I Marauder | Saryon 
III Features Customized Drive Speed Control | Super 
10B version I.J | Com | The Macro System | 



Soflkeys I Safgon III | Wizardry: Proving 
Grounds of the Mad Overlord and Knight of Diamonds 
Render' Sojikeys I The Report Card V I . I | Kid writer 
Feature | Apple || Root ROM Disassembly I Core I The 
Graphic Grabber v.VU | Copy II- 5,0. A Review ' "I he 
Know-Drive: A Hardware Evaluation | An Improved 
BASIC'Blnary Combo | 

Mm SP Readers' Sofikevs . Rendezvous With 
Rama | Pcachtrec's Back To Basics Accounting System 
USD Siaiisucs Series 1 Ariihmetickle I Arithmekicks and 
Parly Garne> for Children Features Double Your 
ROM Space | Towards a Better FR ROM I Tk Nihbler: 
A Utility Program to Examine Raw Nibbles From Disk i 
Core | The Games of 1984: In Review-part II ' ..... 

Mm a Soft keys i Scholastic Version of Bank 
Street Writer | Applewritcr Ik SSI's Non-RDOS 
Disks | Readers' Saftkeys I EP1 Accounting Programs 
DesignWaic Piogiams | Features I Installing a Free 
Sector Patch Into Applewriter lie. | Simple Copy- 
protection ■ Cure I The Games of 1984: In Revieis 
65C02 Chips Now Available Checksoft v2 I 

1 M\ Softkeys I The Print Shop I Crossword 
Magic The Standing Stones | Beer Run | SkytM | 
Random House Disks | Features I A Tutorial For Disk 
Inspection and the Use Of Super IOB | S-C Macro 
Assembler Directives (icpiinl) Care | The Graphic 
Grabber For The Print Shop | The Lone Catalog 
Arranger vl.O Part 2 | , 

X 6 Sofiikey Sensible Speller for ProDOS 
Sideways Rentiers ' Sojikeys | Rescue Raiders I'Shcila 
Basic Building Blocks Artsci Programs I Crossfire 
Feature Secret Weapon- RAMcatd Core | The 
Controller Writer | A Fix For The Reyoud Caslle 
Wolfenstein Softkey I The Lone Catalog Arranger 
Par I | '.'. ,„.., 

1 O Siijikevs , Lai Pak Beyond Castle 
Wolfenstein I Transylvania The Quest Electronic 
Arts | Snooper Troops (Case 2) DLM Software 
Learning Willi Peeper | TellSlai | Care CSaver" The 
Advanced Way to Store Super [OR Com rollers Adding 
New Commands to DOS 3.3 Fixing ProDOS 1 .0. 1 
BSAVE Bug ft'cit'u. | Enhancing Your Apple 
Feature Locksmith 5.0 and Locksmith Programming 
Language | 



JB Softkeys ^axson ' Mask of the Sun | Crush 
Crumble & Chomp I Snake Byte I DB Master 
MoLiskattack Feature! I Making Liberated Backups 
That Retain Their Copy Protect ion S-C Assembler- 
Renew ' Disk Di rectory Designer Core Corcfilcr: 
Part I | Upper* l.owei Case Output for Zork , 

^mW\ Sofikeys | Ultima 11 | Witness | Prisoner 11 Pest 
Pairol Adventure Tips lor U I lima II & III | Copy II 
Plus FARMS Cpdak- | rfiriiii-j- \ Ultima II Character 
Editor | ' 

1 Softkevs Data Reporter Mulliplan Zork ' 
Fcuiures PARMS for Copy 11 Plus | No More Bugs 
APT's for Chnpliiierft Cannonball Blitz 'Caprcnrtl' 
Reeie^s | Replay Craeksh(>t | Snapshot Wildcaid 

CORE 3 Games: 

CoristrLiclmg Your Own Joystick | Compiling Games 
GAMF. RFV1FWS: Over 111 tit Hie tnl.:sl and best Pick 
Of The Pack: All-time TOP 20 games ' Destiuciise 
Forces | EAMON Graphics Magician and 
GraFORTH I Dragon Dungeon 

CORE 2 Utilites: 

Dynamic Menu High Res: Scroll Demo | GOTO 
Label: Replace | Line Find Quick Copy: Copy | ,, 

CORE 1 Graphics: 

Memory Map Text Graphics: Marquee | Roses 
Jagged .Scroller I Low Res: Color Character Chart I 
High Res: Screen Cruncher | The UFO Factory | 
Color Vector Graphics: Shimmering Shapes i A Shape 
Table Mini-Editor | Block Graphics: Arcade Quality 
Graphics for BASIC Programmers | Anitliallotl | , 

Hardcore Computing 3 

HyperDOS Creator Menu Hello Zvphyr Wars I 
Vecior Grttphics | Review of Bit Copiers Boot Code 
Tracing Sol'lkey IOB | Inrerview ivirh "Mike' 
Markkala | .. 



Back issues not listed 
are no longer available. 



But disks are still available for 
AIJ, sold-out issues ! 



Use the order form 
on the other side of this page 



i 



Writer's Guide 



COMPUTIST 

is a monthly magazine dedicated to the 
serious user of the Apple (or compatible) 
computer COM PUTIST welcomes articles 
on a variety of subjects in all levels of 
technical difficulty but requires accuiale 
data, technical competence, correct English 
usage, readable style, and fully denned 
jargon and buzzwords. 



MANUSCRIPT 
MECHANICS 



All manuscripts must be typed or printed 
on one side of the paper. Text should be 
double-spaced. 

Printouts should use a non-compressed 
font with both upper and lower case. A letter 
quality mode is preferred, with each page 
torn at the perforation only. Pages need not 
be stapled together. 1 he cover page of each 
manuscript should contain the following 
data: 

TITLE OF WORK 

FULL NAME OF AUTHOR 

ADDRESS 

PHONE NUMBER 

Each page of the manuscript and program 
listing should include the author's name, the 
title of the work, and the page number in 
the upper right hand corner. 

The article and any accompanying 
program SHOULD BE SUBMITTED AS 
A STANDARD TEXT FILE ON A DOS 
3,3 DISK. Label the disk with the title of 
the work and the author's full name and 
address ON DISK, TEXT MUST BE 
SINGLE-SPACED ONLY. Please identify 
your editing program, 

Original disks are always returned as soon 
as possible. Other materials will be returned 
only when adequate return packaging and 
postage is enclosed. We are not responsible 
for unreturned .submissions. We will 
guurunlcc the return of original commercial 
disks mailed to us for verification of an 
accompanying softkey. 

You will be notified of the status of your 
submission within 4 to 6 weeks after it is 
received if the article is a softkey 
accompanied by an original disk. Please 
submit completed manuscripts directly; do 
not query first. Pteviously published 
material and simultaneous submissions are 
not accepted. 
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SUBJECTS 



We prefer material on these topics; 

1) Original program /article combinations 

2) General articles (Apple computing) 

3) Softkeys 

4) Advanced Playing Techniques (APT's) 

5) Hardware modifications 

6) DOS modifications 

7) Product reviews (hardware and software) 

8) Utilities 

9) Bit Copy Parameters 



WRITING 
YOLK ARTICLE 



Observe the following points of style; 

A. Always assume that your reader is a 
novice and explain all buzzwords and 
technical jargon. Pay special attention to 
grammar and punctuation; we require 
technical competence but also good, 
readable style. 

B. Whenever appropriate, a lisL of hardware 
and software requirements should be 
included at the beginning of die manuscript. 
When published, this list will be offset from 
the main text. 

* 

C. Include the name and address of the 
manufacturer and the price when a 
commercial program is mentioned . This is 
of particular importance in ITIODUCT 

/ 



REVIEWS. 



D. When submitting programs, first 
introduce the purpose of the program and 
features of special interest Include 
background information describing its use. 

Tips for advanced uses, program 
modifications, and utilities can also be 
included. Avoid long print statements and 
use TABs instead of spaces. 

Remember: A heginner should be able to 
type the program with case. 

E, A PROGRAM is not accepted for 
publication without an accompanying 
article. These articles, as well as articles on 
hardware and DOS modi fie a I ions MUST 
summarize the action of the main routines 
and include a fully remarked listing. 



F. GENERAL ARTICLES may include 
advanced lips, tutorials, and explorations of 
a particular aspect of Apple computing. 

G. SOFTKEYS of any length arc acceptable 
and must contain detailed step- by- step 
procedures. For each softkey. first introduce 
the locking technique used and then give 
precise steps to unlock the copy -protected 
program. Number each step whenevei 
possible. We accept articles which explain 
locking techniques used in several programs 
published by the same company. 

H. When altering game programs, the 
changes made are sometimes extensive 
enough to warrant the title of ADVANCED 
PLAYING TECHNIQUE (APT). APTs can 
deal with alterations to a program, deleting 
annoying sounds, acquiring more points in 
play and avoiding hazards. Again, provide 
stcp-by-stcp instructions to complete each 
APT and explain each step's function. 
APT's of 1(X) words or more are preferred. 
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AUTHOR'S RIGHTS 



Each article is published under the 
author's byline. As a rule, all rights, as well 
as one-time reprint rights are purchased. 
Purchase of exclusive rights to programs is 
required; however, alternate arrangements 
may be made with individual aulhors 
depending on the merit of the contribution . 
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PAYMENTS 



COM PUTIST pays upon publication. 
Rate of payment depends on the amount of 
editing required and the length oi the article. 
Payment ranges from $20 to 550 per typeset 
page for an article. We also pay fli 1 to $20 
for short softkeys and APT's A fully 
explained softkey accompanied by the 
commercial disk for verification may earn 
up to $50 per typeset page. 

Please mail your submissions to: 

COMPUTIST 
Editorial Department 

PO Box 110846-T 
Tacoma, WA 98411 
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GO 

AHEAD 

It's legal 
to make 
backups 

of your locked-up 
commercial software 

The Book Of Softkeys 

Shows you how to remove copy protection from commercial software. 




Volume 1 (157 pages), contains softkeys 
for: Akalabeth. Ampermagic, Apple Galaxian, Aztec, 
Bag of Tricks, Bill Budge's Trilogy, Buzzard Bait, 
Cannonball Blitz, Casino, Data Reporter, Deadline, 
Disk Organizer II, Egbert II Communications Disk, 
Hard Hat Mack, Home Accountant, Homeword, 
Lancaster, Magic Window II, Multi-disk Catalog. 
Multiplan, Pest Patrol, Prisoner II, Sammy Lightfoot, 
Screen Writer II, Sneakers, Spy's Demise, 
Starcross, Suspended, Ultima II, Visifile, Visiplot, 
Visitrend, Witness, Wizardry, Zork I, Zork II, Zork 
III, plus how-to articles and program listings of 
leed-to-have programs used to make unprotacted 
oackups. 

Volumes II and III are being 
compiled now! 



YES, I want copies of The Book of Softkeys Volume 1 . 1 have 

enclosed $20 per book Foreign orders add 20 u /b. U.S. funcji. drawn 
on U.S. banks. Washington State orders add 7.8% sales tax Send 
your orders to: 

SoftKey Publishing 

PO Box 1 1 09.V7- A 

Tauoma, W'A 9841 1 



Name.. 



_ID#_ 



Address 
City 



State 



Zip 



Country 



Phone 



Exp. 



Signature. 



. CP32 



